# Threat intelligence **URL:** \ **Category:** Elastic Security\ **Created:** [March 22, 2023, 6:26am UTC](https://discuss.elastic.co/t/threat-intelligence/328211 "2023-03-22T06:26:02Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![ermilan2309](https://avatars.discourse-cdn.com/v4/letter/e/b9bd4f/32.png) [@ermilan2309](https://discuss.elastic.co/u/ermilan2309)\ **Post date:** [March 22, 2023, 6:26am UTC](https://discuss.elastic.co/t/threat-intelligence/328211/1 "2023-03-22T06:26:02Z")
Hello, I would like to integrate threat intelligence with wazuh. How can I do that. what are the ways to archive this ? I have deployed the hive , cortex and MISP for threat intelligence but do not know how to integrate with wazuh. Can some one please help if they know how to do this. I have all in one deployment of elk with wazuh. Thanks, ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 22, 2023, 6:36am UTC](https://discuss.elastic.co/t/threat-intelligence/328211/2 "2023-03-22T06:36:09Z")
I am not sure we directly have a lot of experience with wazuh doing this, but there may be community members that have it that can hopefully share something. Is there a reason you aren't using Elastic Security to do this? ---
**Author:** ![ermilan2309](https://avatars.discourse-cdn.com/v4/letter/e/b9bd4f/32.png) [@ermilan2309](https://discuss.elastic.co/u/ermilan2309)\ **Post date:** [March 22, 2023, 4:41pm UTC](https://discuss.elastic.co/t/threat-intelligence/328211/3 "2023-03-22T16:41:07Z")
I do not know what is elastic security and what is difference between Elastic Security and TheHive,Misp ? Can you please share something about Elastic security ? Also is it free or paid ? ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [March 22, 2023, 5:05pm UTC](https://discuss.elastic.co/t/threat-intelligence/328211/4 "2023-03-22T17:05:42Z")
> [@ermilan2309](#): > > I have all in one deployment of elk with wazuh. Are you using Elastic distribution of Elasticsearch or are you using the Wazuh distribution, which uses Opensearch? Those are completely different things. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 22, 2023, 5:05pm UTC](https://discuss.elastic.co/t/threat-intelligence/328211/5 "2023-03-22T17:05:42Z")
OpenSearch/OpenDistro are AWS run products and differ from the original Elasticsearch and Kibana products that Elastic builds and maintains. You may need to contact them directly for further assistance. (This is an automated response from your friendly Elastic bot. Please report this post if you have any suggestions or concerns :elasticheart: ) ---
**Author:** ![ermilan2309](https://avatars.discourse-cdn.com/v4/letter/e/b9bd4f/32.png) [@ermilan2309](https://discuss.elastic.co/u/ermilan2309)\ **Post date:** [March 22, 2023, 5:31pm UTC](https://discuss.elastic.co/t/threat-intelligence/328211/6 "2023-03-22T17:31:44Z")
I am using wazuh distribution : [All-in-one deployment - Installing Wazuh with Elastic Stack](https://documentation.wazuh.com/current/deployment-options/elastic-stack/all-in-one-deployment/index.html) ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [March 22, 2023, 5:36pm UTC](https://discuss.elastic.co/t/threat-intelligence/328211/7 "2023-03-22T17:36:17Z")
> [@ermilan2309](#): > > I am using wazuh distribution The Wazuh Distribution uses Opensearch, which is a fork of an old version of Elasticsearch, version 7.10. Opensearch is not supported here as it has a lot of changes made mainly by Amazon, you will need to direct your question to a Wazuh forum or an Opensearch forum. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 22, 2023, 9:30pm UTC](https://discuss.elastic.co/t/threat-intelligence/328211/8 "2023-03-22T21:30:33Z")
There's a fair bit in our Security offering, [Security solution unifying SIEM, endpoint & cloud | Elastic](https://www.elastic.co/security) goes into it and there is a lot of free functionality. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 19, 2023, 9:30pm UTC](https://discuss.elastic.co/t/threat-intelligence/328211/9 "2023-04-19T21:30:49Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.