Wazuh + AWS Bedrock: S3 Vectors for SOC Knowledge (Part 4)
Move a SOC corpus of 7115 chunks out of the Wazuh Indexer into Amazon S3 Vectors through Bedrock Knowledge Bases, and measure retrieval, cost and what breaks.
4 posts
Move a SOC corpus of 7115 chunks out of the Wazuh Indexer into Amazon S3 Vectors through Bedrock Knowledge Bases, and measure retrieval, cost and what breaks.
Two stands side by side: what an indexer outage run showed, how the failure boundary moved, what happens to XML rules, and how a finding differs from an alert.
Build a RAG pipeline inside Wazuh Indexer: Titan Embeddings V2, a lucene k-NN index over MITRE ATT&CK, docs, playbooks and MISP IOCs, wired into chat and MCP.
Deploy opensearch-mcp-server-py with Wazuh Indexer in Docker and analyze security alerts via Claude Desktop using Model Context Protocol and examples.