WazuhDashboard

Stream Wazuh SIEM alerts into a dashboard with AI-assisted analysis.

9|1|Updated Apr 16, 2026
One-click install
npx skills add https://github.com/CarbeneAI/Forge --skill wazuhdashboard
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: WazuhDashboard
Source: https://github.com/CarbeneAI/Forge/tree/main/.claude/skills/WazuhDashboard
Command: npx skills add https://github.com/CarbeneAI/Forge --skill wazuhdashboard

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Monitors Wazuh SIEM alerts in real-time and enables AI-assisted contextual analysis to accelerate threat detection and incident response.

Core Features & Use Cases

  • Real-time alert feed with WebSocket streaming and severity color-coding.
  • Advanced filtering by severity, agent, and rule group, plus a split-screen layout with an AI chat panel.
  • PAI chat integration for contextual analysis, remediation suggestions, and incident investigation.
  • HTTP ingest for alerts and a management workflow to deploy and operate the dashboard in diverse environments.

Quick Start

Start the Wazuh dashboard and begin AI-assisted analysis of live alerts.

Frequently Asked Questions about WazuhDashboard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I monitor Wazuh SIEM alerts in real-time?

You can monitor Wazuh SIEM alerts in real-time using a dashboard that streams live alert data via WebSocket and ingests alerts via HTTP, providing a continuously updated feed with severity color-coding for immediate threat visibility.

Can I filter Wazuh security alerts by severity and agent?

Yes, you can filter Wazuh security alerts by severity, agent, and rule group. This allows security operations teams to prioritize threats and focus on specific endpoints or rule sets during incident investigation.

How does AI analysis work for SIEM alert investigation?

AI analysis for SIEM alert investigation works through a PAI chat integration that provides contextual analysis and remediation suggestions across multiple alerts, accelerating incident response with context-aware guidance.

Does the Wazuh dashboard support alert suppression and dismissal workflows?

Yes, the Wazuh dashboard supports alert suppression and dismissal workflows. It enables security teams to manage live alert feeds by actively suppressing or dismissing resolved or irrelevant security alerts.

What is the best way to accelerate threat detection using a Wazuh SIEM dashboard?

The best way to accelerate threat detection using a Wazuh SIEM dashboard is by utilizing severity-based prioritization alongside AI-assisted contextual analysis, which helps quickly identify and investigate critical threats.