I will fix your stuck wazuh rule, decoder, agent or indexer problem
Wazuh Detection Engineer and Custom Rules Decoders
About this Gig
Wazuh says the config is valid, but the alert never shows up? Agents report the wrong IP, the dashboard is empty, or vulnerability detection flags packages you already patched?
Send the rule/decoder files, one sample log line and your Wazuh version. I reproduce the problem on that exact version in a lab, fix it, and you apply the tested files yourself. I never need access to your systems. If I can't reproduce it, I tell you and cancel the order for a full refund.
Server:
Virtual private server
Operating system:
Linux
FAQ
Do you need access to my server?
No. You send files, I send files back. Nothing is installed or run on your side by me.
Which Wazuh versions?
Wazuh 4.x. Tell me your exact version: load order and stock rule ids differ between versions.
What if the review finds nothing?
Then I say so in writing, and for the Basic package you can ask for a refund through Fiverr.
Can you write rules for a device Wazuh does not support out of the box?
Yes, that is the Standard package: one log source per order, from your sample lines.
Do you work with MSSPs?
Yes. Each order covers one cluster. Message me before ordering if you have several customers.

