secubox-openwrt/package/secubox/luci-app-wazuh/root/usr/share/luci/menu.d/luci-app-wazuh.json
CyberMind-FR b1c34021db feat(wazuh): Add LuCI dashboard for Wazuh SIEM integration
Create luci-app-wazuh package with unified security monitoring dashboard
inspired by SysWarden's layered defense model:

- 4 views: Overview, Alerts, File Integrity, Agents
- RPCD handler with 12 API methods for status, alerts, FIM, agent control
- SysWarden-style 4-layer security visualization:
  - Layer 1: Vortex Firewall + nftables (kernel-level)
  - Layer 2: CrowdSec + Bouncer (IPS)
  - Layer 3: Wazuh Manager (SIEM/XDR)
  - Layer 4: mitmproxy + HAProxy (WAF)
- CrowdSec integration for threat correlation
- Real-time polling and auto-refresh
- Simplified printf-based JSON output (avoids jshn segfault)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-14 14:45:05 +01:00

47 lines
1.0 KiB
JSON

{
"admin/services/wazuh": {
"title": "Wazuh SIEM",
"order": 15,
"action": {
"type": "view",
"path": "wazuh/overview"
},
"depends": {
"acl": ["luci-app-wazuh"],
"uci": {"wazuh": true}
}
},
"admin/services/wazuh/overview": {
"title": "Overview",
"order": 1,
"action": {
"type": "view",
"path": "wazuh/overview"
}
},
"admin/services/wazuh/alerts": {
"title": "Alerts",
"order": 2,
"action": {
"type": "view",
"path": "wazuh/alerts"
}
},
"admin/services/wazuh/fim": {
"title": "File Integrity",
"order": 3,
"action": {
"type": "view",
"path": "wazuh/fim"
}
},
"admin/services/wazuh/agents": {
"title": "Agents",
"order": 4,
"action": {
"type": "view",
"path": "wazuh/agents"
}
}
}