| 1 | # Quickstart (Admins / Engineers) |
| 2 | |
| 3 |  |
| 4 | |
| 5 | ## Where you spend most of your time |
| 6 | |
| 7 | - **Connectors**: configure connectivity to the toolchain (Wazuh, Graylog, Grafana, Velociraptor, etc.). |
| 8 | - **External Services / Integrations**: configure per-customer integrations. |
| 9 | - **Scheduler**: enable/disable and tune background jobs/collectors. |
| 10 | |
| 11 | ## Core workflows |
| 12 | |
| 13 | ### 1) Configure connectors |
| 14 | |
| 15 |  |
| 16 | |
| 17 | - Add URLs / credentials |
| 18 | - Verify connectivity |
| 19 | |
| 20 | ### 2) Validate SIEM data availability |
| 21 | |
| 22 |  |
| 23 | |
| 24 | - Confirm Wazuh Indexer is reachable |
| 25 | - Confirm Graylog alerts are being written (often `gl-events*`) |
| 26 | |
| 27 | ### 3) Provision customer resources (if applicable) |
| 28 | |
| 29 |  |
| 30 | |
| 31 | - Use customer provisioning flows for Grafana/Graylog/Wazuh/Portainer where supported |
| 32 | |
| 33 | ### 4) Operationalize automation |
| 34 | |
| 35 |  |
| 36 | |
| 37 | - Enable scheduled collectors |
| 38 | - Confirm job metadata updates and error handling |