searchAlerts
Monitor and analyze Wazuh security alerts by searching logs within specified time ranges using OpenSearch MCP Server. Set custom queries, define result limits, and target specific indexes for efficient alert management.
Instructions
Search for security alerts in Wazuh data
Input Schema
Name | Required | Description | Default |
---|---|---|---|
index | No | Index pattern to search | wazuh-alerts-* |
maxResults | No | Maximum number of results to return | |
query | Yes | The search query text | |
timeRange | No | Time range (e.g., 1h, 24h, 7d) | 24h |