# Wazuh Integration with VK Cloud Setup

> Set up Wazuh integration with VK Cloud - connect the activity log, audit security events, collect cloud resource logs, and configure agents

Source: https://opennix.org/en/docs/vk/wazuh/wazuh-vk-cloud-integration/


## Exporting VK Cloud Audit Logs to Wazuh

After you deploy the solution from the VK Cloud Marketplace, all the details required for the connection are sent to the email address of the user who submitted the installation request.

The solution will be fully ready to work with security events. To start receiving VK Cloud audit events, do the following:

1. Open the VK Cloud web interface and select the desired project.
2. Go to the `Мониторинг` (Monitoring) --> `Журнал событий` (Event Log) section.
3. Select `Настройки` (Settings).
4. Click `Создать подключение` (Create connection) and fill in the fields:
   - `Название` (Name) - as you prefer
   - `Точка подключения` (Connection endpoint) - the external IP address of the Wazuh server (if an HA setup is used, the IP address of the Wazuh Worker) and port `514`
5. In the `Протокол передачи данных` (Data transfer protocol) field, select TCP.
6. In the `Формат сообщения` (Message format) field, select `CEF`.
7. Click `Создать` (Create).
8. In the window that appears, click `Активировать` (Activate).

**Note:** At this time we support only audit logs in `CEF` (Common Event Format).

After these steps, VK Cloud events will start appearing in the Wazuh web interface.