Connection refused while sending alerts from Wazuh to TheHive using elastalert

[shadowAngel000]

Hello,

I am trying to send the alerts from Wazuh to TheHive, using ElastAlert. I am getting 'remote connection closed'.

Both Wazuh and TheHive are on the same VLAN (virtual images on ProxMox)

I don't know if the issue is from one of the following:

• Authentification error between ElastAlert and TheHive
• Proxy issue

(Traffic is not passing through firewall since same Vlan, and I have the UFW on TheHive inactive)

Thank you

[nsano-rururu]

elastalert is not maintained.
No one answers the issue.

[nsano-rururu]

Please close