JupiterOne provides a managed integration with Wazuh. The integration connects directly to Wazah Manager APIs to obtain agent information. Customers authorize access to their self-hosted servers by providing the manager base URL and a username and password to JupiterOne.

Integration Instance Configuration

The integration is triggered by an event containing the information for a specific integration instance.


The following entity resources are ingested when the integration runs:

Example Entity Resource _type : _class of the Entity
Manager wazuh_manager : Service, Control
Agent wazuh_agent : HostAgent


The following relationships are created/mapped:

From Type To
wazuh_manager HAS wazuh_agent