51 lines
998 B
YAML
51 lines
998 B
YAML
---
|
|
#start of yaml
|
|
|
|
# This is the yaml config file for both the wazuh-ntfy-notifier.py and wazuh-discord-notifier.py.
|
|
# The yaml needs to be in the same folder as the wazuh-ntfy-notifier.py and wazuh-discord-notifier.py
|
|
|
|
targets: "discord,ntfy"
|
|
full_message: "ntfy"
|
|
|
|
# Exclude rules that are listed in the ossec.conf active response definition.
|
|
|
|
excluded_rules: "5401,5403"
|
|
excluded_agents: "999"
|
|
|
|
# Priority mapping from 1-12 (Wazuh events) to 1-5 (Discord and ntfy notification)
|
|
# Discord mention after x amount of event fired times
|
|
|
|
priority_map:
|
|
-
|
|
threat_map: [15,14,13,12]
|
|
mention_threshold: 1
|
|
color: 0xcc3300
|
|
-
|
|
threat_map: [11,10,9]
|
|
mention_threshold: 1
|
|
color: 0xff9966
|
|
-
|
|
threat_map: [8,7,6]
|
|
mention_threshold: 5
|
|
color: 0xffcc00
|
|
-
|
|
threat_map: [5,4]
|
|
mention_threshold: 5
|
|
color: 0x99cc33
|
|
-
|
|
threat_map: [3,2,1,0]
|
|
mention_threshold: 5
|
|
color: 0x339900
|
|
|
|
|
|
sender: "Wazuh (IDS)"
|
|
click: "https://google.com"
|
|
|
|
|
|
#end of yaml
|
|
...
|
|
|
|
|
|
|
|
|