Wazuh alerts to DFIR IRIS create case

Questions
1

I have successfully received Wazuh alerts to n8n Webhook.
However, I am unable to send Wazuh alerts to DFIR IRIS and create a case automatically.

image
image3393×1216 370 KB

2

maybe it’s coming from DFIR IRIS server?

3

It says check the server logs, have you?

4

Let me know if any method to create a case from n8n or any API query.
I tried all failed.

5

Is there any error from your server?

6

172.18.0.1 - - [07/Jul/2025:05:05:16 +0000] “POST /manage/cases/add HTTP/1.1” 400 85 “-” “axios/1.8.3” “-”

This is an error showing on the IRIS side.

7

can u access the IRIS from the browser?

8

(post deleted by author)

9

(post deleted by author)

10

Yes I able to access IRIS.