I am working on a project to collect all logs from monitoring software such as Web Security Gateway, EDR, NAC,.. I need to process them and standardize them according to some standard so that I can produce a common log and save it for each client in real time. Do you know how to do them?

I’m learning about Wazuh and Splash but I’m still quite confused about whether Wazuh has functions such as blocking specific websites or blocking USB. And how to connect with other software so they don’t report the same log.