How to install Wazuh server and agent on ubuntu in 5 minutes

Mivocloud

Member
Surely you heard about Wazuh. Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments.

Commands Used:
sudo apt update && sudo apt install curl apt-transport-https unzip wget libcap2-bin software-properties-common lsb-release gnupg2
curl -sO https://packages.wazuh.com/4.5/wazuh-install.sh && chmod 744 wazuh-install.sh && bash ./wazuh-install.sh -a
 
Thanks for sharing Anatolie, Your post encouraged me to check it out again - i followed your commands worked on with Ubuntu 24 (1 vCPU and 4GB memory) - only change was to add 4.9 (latest version) then apply SSL for the subdomain selected - here are the details in case it helps someone else: (note change sub-domain) to your own

apt-get install snap
snap install core; snap refresh core
snap install --classic certbot
certbot certonly --standalone -d
cp /etc/letsencrypt/live/subdomain/privkey.pem /etc/letsencrypt/live/subdomain/fullchain.pem /etc/wazuh-dashboard/certs/
cp /etc/letsencrypt/live/sub-domain/privkey.pem /etc/letsencrypt/live/sub-domain/fullchain.pem /etc/wazuh-dashboard/certs/
apt install vim -y
vim /etc/wazuh-dashboard/opensearch_dashboards.yml
chown -R wazuh-dashboard:wazuh-dashboard /etc/wazuh-dashboard/
chmod -R 500 /etc/wazuh-dashboard/certs/
chmod 440 /etc/wazuh-dashboard/certs/privkey.pem /etc/wazuh-dashboard/certs/fullchain.pem
systemctl restart wazuh-dashboard
 

Attachments

  • wazuh-dashboard-fresh.png
    wazuh-dashboard-fresh.png
    565.5 KB · Views: 4
Back
Top