Description
Description
I noticed that in the wazuh documentation there is no section that reports the possibility of extending the functions of wazuh by installing dashboard plugins.
In particular, I noticed that even on the web there is little or no talk about this topic and in the Wazuh forum there are several people who ask, for example, if it is possible to have Machine Learning functionality in Wazuh and no one replies with the correct solution but they point out for example to integrate the entire opensearch SIEM.
So it would be great if you can add this entry and the basic commands to install some of these plugins in the documentation.
For example, I saw that if you want (in my case I'm using Docker) you can add Machine Learning and Anomaly Detection capabilities creating a Dockerfile for the wazuh-dashboard with the following commands:
FROM wazuh/wazuh-dashboard:4.9.0
# Installation of the anomaly detection plugin
RUN /usr/share/wazuh-dashboard/bin/opensearch-dashboards-plugin install anomalyDetectionDashboards
# Installation of the machine learning plugin
RUN /usr/share/wazuh-dashboard/bin/opensearch-dashboards-plugin install mlCommonsDashboards
# Change of permissions and ownership
RUN chown -R wazuh-dashboard:wazuh-dashboard /usr/share/wazuh-dashboard/plugins/anomalyDetectionDashboards/ && \
chmod -R 750 /usr/share/wazuh-dashboard/plugins/anomalyDetectionDashboards/ && \
chown -R wazuh-dashboard:wazuh-dashboard /usr/share/wazuh-dashboard/plugins/mlCommonsDashboards/ && \
chmod -R 750 /usr/share/wazuh-dashboard/plugins/mlCommonsDashboards/
Thanks in advance!