TrueNAS and Wazuh

Hello everybody,

does anyone knows if it is possible to monitor the nas activity on Wazuh?

Not only the alerts on the nas (about pools’ status, etc) but even the FIM option (if someone delete or rename X files in X time) or check the files with Yara or ClamAV (I know that is possible I need to learn how)

I have installed the agent on some clients (windows and linux) to test it (I am still learn how it works) but as far as I know there is no “official client” for TrueNAS.

While TrueNAS is running Debian Linux I would not recommend installing Wazuh directly on it as TrueNAS is more of an appliance and I am not sure what conflicts Wazuh would cause. It’s best to monitor the hosts that are connecting to TrueNAS.

Ok.. :+1:

but for the “other part” (pool & hdd status, etc) do you think that it is possible “to send” the logs to wazuh?

You can configure wazuh server to collect remote logs (port 514). Set Truenas to export logs.

I export truenas logs to influxdb and then display them using grafana.

2 Likes