Wazuh MCP Server: Claude Desktop + OpenSearch (Part 2)

 Posted on March 23, 2026  (Last modified on April 18, 2026)  |  9 minutes  |  1730 words  |  pyToshka  • Other languages: Русский

Introduction

In Part 1 we connected AWS Bedrock Claude to the Wazuh Dashboard chat via ML Commons. That approach works well for analysts working inside the Wazuh UI. In this part we open a second channel: Model Context Protocol (MCP), which allows any compatible client - Claude Desktop, custom applications, CI pipelines - to query Wazuh Indexer data through a standardized tool interface.

[Read More]
wazuh  aws  bedrock  mcp  llm  ai  security  devsecops  docker  opensearch  siem  claude  threat analysis  security monitoring  automation 

Wazuh + AWS Bedrock: AI Security in Docker (Part 1)

 Posted on March 16, 2026  (Last modified on April 22, 2026)  |  7 minutes  |  1428 words  |  pyToshka  • Other languages: Русский

Introduction

In the previous article we embedded a local Ollama model directly into the Wazuh Dashboard chat via ML Commons. That approach provides full control over data with no cloud dependencies. In this series we take a parallel path: using AWS Bedrock - specifically Claude Sonnet 4.5 - as the inference backend, while all security data stays strictly within the local Docker network.

[Read More]
devsecops  wazuh  security  aws  docker  llm  ai  machine learning  cybersecurity  automation  monitoring  threat intelligence  security operations  cloud security  mcp