Running Suricata and Wazuh on the Same AWS Instance – Log Collection Conflict?

Help
1

Hi everyone,

I’m planning to run Suricata on the same AWS instance as Wazuh. Wazuh is already collecting logs from a firewall, and I want Suricata to pick up logs from the same firewall simultaneously.

At this stage, Suricata is not yet integrated with Wazuh—each tool has its own dashboard since I’m still in the development phase.

Would there be any potential conflicts or issues when both Suricata and Wazuh are collecting logs from the firewall at the same time on the same instance? Any insights or best practices would be greatly appreciated!

Thanks in advance!

2

Suricata does not pick up logs, it creates log by itself due to the capture of network traffic.

3

I’m sorry, I meant the traffic of firewall forwarded to suricata. Would there be any conflict, deploying suricata in same server as wazuh.