Cyber Security: Wazuh Install - Revision history

Unknown user: /* Menginstal Wazuh */

2023-09-07T03:31:35Z

Menginstal Wazuh

← Older revision		Revision as of 03:31, 7 September 2023
Line 59:		Line 59:
	curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a		curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a

	Jika hardware yang digunakan menggunakan spec di bawah standar kita dapat memaksa installer untuk untuk ignore hardware spec (-i)		Jika hardware yang digunakan menggunakan spec di bawah standar kita dapat memaksa installer untuk untuk ignore hardware spec (-i) overight (-o)

	curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a -i		curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a -i -o

	Setelah asisten menyelesaikan penginstalan, output menampilkan kredensial akses dan pesan yang mengonfirmasi bahwa penginstalan berhasil.		Setelah asisten menyelesaikan penginstalan, output menampilkan kredensial akses dan pesan yang mengonfirmasi bahwa penginstalan berhasil.

Unknown user: /* Menginstal Wazuh */

2023-09-07T03:11:07Z

Menginstal Wazuh

← Older revision		Revision as of 03:11, 7 September 2023
Line 51:		Line 51:
	==Menginstal Wazuh==		==Menginstal Wazuh==

	~~Install~~ Wazuh GPG key		Jika dibutuhkan, biasanya tidak perlu, kita dapat menginstall Wazuh GPG key

	curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH \| apt-key add -		curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH \| apt-key add -
Line 59:		Line 59:
	curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a		curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a

	untuk ignore hardware spec		Jika hardware yang digunakan menggunakan spec di bawah standar kita dapat memaksa installer untuk untuk ignore hardware spec (-i)

	curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a -i		curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a -i
Line 69:		Line 69:
	User: admin		User: admin
	Password: <ADMIN_PASSWORD>		Password: <ADMIN_PASSWORD>
			INFO: Installation finished.

			Contoh,

			INFO: --- Summary ---
			INFO: You can access the web interface https://<wazuh-dashboard-ip>
			User: admin
			Password: 337SaXHs4YdC90sRhnuBzUMnrEmfVyo+
	INFO: Installation finished.		INFO: Installation finished.

	Anda sekarang telah menginstal dan mengkonfigurasi Wazuh.		Anda sekarang telah menginstal dan mengkonfigurasi Wazuh.

	Akses ~~antarmuka~~ web Wazuh dengan https://<wazuh-dashboard-ip> dan kredensial Anda:		Sebaiknya cek konfigurasi supaya bisa di akses dari remote di ossec.conf menggunakan <remote> XML tag. Secara default, akan monitor apapun IP address-nya. Jika dibutuhkan, kita dapat ubah IP address service untuk listen, sebagai berikut,

			<ossec_config>
			<remote>
			<local_ip>192.168.0.65</local_ip>
			</remote>
			</ossec_config>

			Ini akan menset manager listen ke IP address 192.168.0.65.

			Jika kita mengubah nilai parameter ossec.conf , kita perlu me-restart service.

			systemctl restart wazuh-indexer
			systemctl restart wazuh-manager
			systemctl restart filebeat.service
			systemctl restart wazuh-dashboard

			Akses interface web Wazuh dengan https://<wazuh-dashboard-ip> dan kredensial Anda:

	Username: admin		Username: admin
	Password: <ADMIN_PASSWORD>		Password: <ADMIN_PASSWORD>

	Saat Anda mengakses dasbor Wazuh untuk pertama kali, browser menampilkan pesan peringatan yang menyatakan bahwa sertifikat tidak dikeluarkan oleh otoritas ~~tepercaya~~. Hal ini diharapkan dan pengguna memiliki opsi untuk menerima sertifikat sebagai pengecualian atau, alternatifnya, ~~mengonfigurasi~~ sistem untuk menggunakan sertifikat dari otoritas ~~tepercaya~~.		Saat Anda mengakses dasbor Wazuh untuk pertama kali, browser menampilkan pesan peringatan yang menyatakan bahwa sertifikat tidak dikeluarkan oleh otoritas terpercaya. Hal ini diharapkan dan pengguna memiliki opsi untuk menerima sertifikat sebagai pengecualian atau, alternatifnya, mengkonfigurasi sistem untuk menggunakan sertifikat dari otoritas terpercaya.

	Anda dapat menemukan kata sandi untuk semua pengindeks Wazuh dan pengguna API Wazuh di file wazuh-passwords.txt di dalam wazuh-install-files.tar. Untuk mencetaknya, jalankan perintah berikut:		Anda dapat menemukan kata sandi untuk semua pengindeks Wazuh dan pengguna API Wazuh di file wazuh-passwords.txt di dalam wazuh-install-files.tar. Untuk mencetaknya, jalankan perintah berikut:
Line 84:		Line 109:
	sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt		sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt

	Jika Anda ingin menghapus instalasi komponen utama Wazuh, jalankan asisten instalasi Wazuh menggunakan opsi -u atau ~~–-uninstall~~.		Jika Anda ingin menghapus instalasi komponen utama Wazuh, jalankan asisten instalasi Wazuh menggunakan opsi -u atau –uninstall.

	==Referensi==		==Referensi==

Unknown user: /* Menginstal Wazuh */

2023-07-14T11:10:13Z

Menginstal Wazuh

← Older revision		Revision as of 11:10, 14 July 2023
Line 50:		Line 50:

	==Menginstal Wazuh==		==Menginstal Wazuh==

			Install Wazuh GPG key

			curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH \| apt-key add -

	Unduh dan jalankan asisten instalasi Wazuh.		Unduh dan jalankan asisten instalasi Wazuh.

Unknown user: /* Menginstal Wazuh */

2023-07-14T09:16:38Z

Menginstal Wazuh

← Older revision		Revision as of 09:16, 14 July 2023
Line 54:		Line 54:

	curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a		curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a

			untuk ignore hardware spec

			curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a -i

	Setelah asisten menyelesaikan penginstalan, output menampilkan kredensial akses dan pesan yang mengonfirmasi bahwa penginstalan berhasil.		Setelah asisten menyelesaikan penginstalan, output menampilkan kredensial akses dan pesan yang mengonfirmasi bahwa penginstalan berhasil.
Line 77:		Line 81:

	Jika Anda ingin menghapus instalasi komponen utama Wazuh, jalankan asisten instalasi Wazuh menggunakan opsi -u atau –-uninstall.		Jika Anda ingin menghapus instalasi komponen utama Wazuh, jalankan asisten instalasi Wazuh menggunakan opsi -u atau –-uninstall.


	==Referensi==		==Referensi==

Unknown user: /* Referensi */

2023-07-11T04:13:52Z

Referensi

← Older revision		Revision as of 04:13, 11 July 2023
Line 82:		Line 82:

	* https://documentation.wazuh.com/current/quickstart.html		* https://documentation.wazuh.com/current/quickstart.html

			==Pranala Menarik==

			* [[Cyber Security]]
			* [[Cyber Security: Audit Framework]]
			* [[Cyber Security: Security Operations Center Components]]
			* [[Cyber Security: SIEM Open Source]]
			* [[Cyber Security: Road Map]]
			* [[Cyber Security: OSSIM]]
			* [[Cyber Security: Wazuh]]
			* [[Cyber Security: Security Onion]]
			* [[Cyber Security: MISP]]
			* [[Cyber Security: thehive]]

Unknown user at 23:43, 9 July 2023

2023-07-09T23:43:15Z

← Older revision		Revision as of 23:43, 9 July 2023
Line 1:		Line 1:
	Wazuh ~~is a security~~ platform ~~that provides unified~~ XDR ~~and~~ SIEM ~~protection for endpoints and~~ cloud ~~workloads~~. ~~The solution is composed of a single~~ universal ~~agent and three central components~~: ~~the~~ Wazuh server, ~~the~~ Wazuh indexer, ~~and the~~ Wazuh dashboard.		Wazuh adalah platform keamanan yang memberikan perlindungan XDR dan SIEM terpadu untuk endpoint dan cloud workload. Solusinya terdiri dari satu agen universal dan tiga komponen utama: Wazuh server, Wazuh indexer, dan Wazuh dashboard.

	Wazuh is free ~~and~~ open source. ~~Its components abide by the~~ GNU General Public License, version 2, ~~and the~~ Apache License, Version 2.0 (ALv2).		Wazuh free dan open source. Komponennya mematuhi GNU General Public License, version 2, dan Apache License, Version 2.0 (ALv2).

	~~This quickstart shows you how to install the~~ Wazuh ~~central components~~, ~~on the same~~ host, ~~using our installation assistant. You can check our Installation guide for more details and other installation options~~.		Quickstart ini menunjukkan kepada Anda cara menginstal komponen utama Wazuh, di host yang sama, menggunakan asisten penginstalan.

	~~Below you can find a section about the requirements needed to install~~ Wazuh. ~~It will help you learn about the hardware requirements and the supported operating systems for your~~ Wazuh ~~installation~~.		Di bawah ini kita dapat menemukan bagian tentang persyaratan yang diperlukan untuk menginstal Wazuh. Ini akan membantu kita mempelajari tentang persyaratan perangkat keras dan sistem operasi yang didukung untuk instalasi Wazuh.

	==~~Requirements~~==		==Persyaratan==

	===Hardware===		===Hardware===
	Hardware requirements highly depend on the number of protected endpoints and cloud workloads. This number can help estimate how much data will be analyzed and how many security alerts will be stored and indexed.

	~~Following this~~ quickstart ~~implies deploying the~~ Wazuh server, ~~the~~ Wazuh indexer, ~~and the~~ Wazuh dashboard ~~on the same~~ host. ~~This is usually enough for monitoring up to~~ 100 ~~endpoints and for~~ 90 ~~days of queryable~~/~~indexed alert data~~. ~~The table below shows the recommended hardware for a quickstart deployment~~:		Persyaratan perangkat keras sangat bergantung pada jumlah endpoint yang dilindungi dan beban kerja cloud. Angka ini dapat membantu memperkirakan berapa banyak data yang akan dianalisis dan berapa banyak peringatan keamanan yang akan disimpan dan diindeks.

			Mengikuti quickstart ini berarti menerapkan Wazuh server, Wazuh indexer, dan Wazuh dashboard pada host yang sama. Ini biasanya cukup untuk memantau hingga 100 titik akhir dan selama 90 hari data peringatan yang dapat di query/ indeks. Tabel di bawah menunjukkan perangkat keras yang direkomendasikan untuk penerapan mulai cepat:

	{\| class="wikitable"		{\| class="wikitable"
	\|+ Keperluan Hardware		\|+ Keperluan Hardware
	\|-		\|-
	! Agents !! CPU !! RAM !! Storage (90 ~~days~~)		! Agents !! CPU !! RAM !! Storage (90 hari)
	\|-		\|-
	\| 1–25 \|\| 4 vCPU \|\| 8 GiB \|\| 50 GB		\| 1–25 \|\| 4 vCPU \|\| 8 GiB \|\| 50 GB
Line 26:		Line 27:
	\|}		\|}

	~~For larger environments we recommend a distributed deployment~~. ~~Multi~~-node ~~cluster configuration is available for the~~ Wazuh server ~~and for the~~ Wazuh indexer, ~~providing high availability and load balancing~~.		Untuk lingkungan yang lebih besar, kami merekomendasikan penerapan terdistribusi. Konfigurasi cluster multi-node tersedia untuk Wazuh server dan Wazuh indexer, menyediakan ketersediaan tinggi dan penyeimbangan muatan.


	===Operating system===		===Operating system===

	Wazuh ~~central components can be installed on a~~ 64-bit ~~Linux operating system~~. Wazuh ~~recommends any of the following operating system versions~~:		Komponen utama Wazuh dapat diinstal pada sistem operasi Linux 64-bit. Wazuh merekomendasikan salah satu versi sistem operasi berikut:

	* Amazon Linux 2		* Amazon Linux 2
Line 39:		Line 41:
	===Browser compatibility===		===Browser compatibility===

	Wazuh dashboard ~~supports the following~~ web ~~browsers~~:		Wazuh dashboard mendukung web browser berikut:

	* Chrome 95 or later		* Chrome 95 or later
Line 45:		Line 47:
	* Safari 13.7 or later		* Safari 13.7 or later

	~~Other~~ Chromium~~-based browsers might also work~~. Internet Explorer 11 ~~is not supported~~.		Browser berbasis Chromium lainnya mungkin juga berfungsi. Internet Explorer 11 tidak didukung.

	==~~Installing~~ Wazuh==		==Menginstal Wazuh==

	~~Download and run the~~ Wazuh ~~installation assistant~~.		Unduh dan jalankan asisten instalasi Wazuh.

	curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a		curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a

	~~Once the assistant finishes the installation~~, ~~the~~ output ~~shows the access credentials and a message that confirms that the installation was successful~~.		Setelah asisten menyelesaikan penginstalan, output menampilkan kredensial akses dan pesan yang mengonfirmasi bahwa penginstalan berhasil.

	INFO: --- Summary ---		INFO: --- Summary ---
Line 61:		Line 63:
	INFO: Installation finished.		INFO: Installation finished.

	~~You now have installed and configured~~ Wazuh.		Anda sekarang telah menginstal dan mengkonfigurasi Wazuh.

	~~Access the~~ Wazuh ~~web interface with~~ https://<wazuh-dashboard-ip> ~~and your credentials~~:		Akses antarmuka web Wazuh dengan https://<wazuh-dashboard-ip> dan kredensial Anda:

	Username: admin		Username: admin
	Password: <ADMIN_PASSWORD>		Password: <ADMIN_PASSWORD>

	~~When you access the~~ Wazuh ~~dashboard for the first time~~, ~~the~~ browser ~~shows a warning message stating that the certificate was not issued by a trusted authority~~. ~~This is expected and the user has the option to accept the certificate as an exception or~~, ~~alternatively~~, ~~configure the system to use a certificate from a trusted authority~~.		Saat Anda mengakses dasbor Wazuh untuk pertama kali, browser menampilkan pesan peringatan yang menyatakan bahwa sertifikat tidak dikeluarkan oleh otoritas tepercaya. Hal ini diharapkan dan pengguna memiliki opsi untuk menerima sertifikat sebagai pengecualian atau, alternatifnya, mengonfigurasi sistem untuk menggunakan sertifikat dari otoritas tepercaya.

	~~Note You can find the passwords for all the~~ Wazuh ~~indexer and~~ Wazuh ~~API users in the~~ wazuh-passwords.txt ~~file inside~~ wazuh-install-files.tar. ~~To print them~~, ~~run the following command~~:		Anda dapat menemukan kata sandi untuk semua pengindeks Wazuh dan pengguna API Wazuh di file wazuh-passwords.txt di dalam wazuh-install-files.tar. Untuk mencetaknya, jalankan perintah berikut:

	sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt		sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt

	~~If you want to uninstall the~~ Wazuh ~~central components~~, ~~run the~~ Wazuh ~~installation assistant using the option~~ -u or –-uninstall.		Jika Anda ingin menghapus instalasi komponen utama Wazuh, jalankan asisten instalasi Wazuh menggunakan opsi -u atau –-uninstall.

Unknown user at 23:23, 9 July 2023

2023-07-09T23:23:19Z

← Older revision		Revision as of 23:23, 9 July 2023
Line 1:		Line 1:
	~~Quickstart~~		Wazuh is a security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads. The solution is composed of a single universal agent and three central components: the Wazuh server, the Wazuh indexer, and the Wazuh dashboard.
	Wazuh is a security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads. The solution is composed of a single universal agent and three central components: the Wazuh server, the Wazuh indexer, and the Wazuh dashboard~~. For more information, check the Getting Started documentation~~.

	Wazuh is free and open source. Its components abide by the GNU General Public License, version 2, and the Apache License, Version 2.0 (ALv2).		Wazuh is free and open source. Its components abide by the GNU General Public License, version 2, and the Apache License, Version 2.0 (ALv2).
Line 8:		Line 7:
	Below you can find a section about the requirements needed to install Wazuh. It will help you learn about the hardware requirements and the supported operating systems for your Wazuh installation.		Below you can find a section about the requirements needed to install Wazuh. It will help you learn about the hardware requirements and the supported operating systems for your Wazuh installation.

	Requirements		==Requirements==
	Hardware
			===Hardware===
	Hardware requirements highly depend on the number of protected endpoints and cloud workloads. This number can help estimate how much data will be analyzed and how many security alerts will be stored and indexed.		Hardware requirements highly depend on the number of protected endpoints and cloud workloads. This number can help estimate how much data will be analyzed and how many security alerts will be stored and indexed.

	Following this quickstart implies deploying the Wazuh server, the Wazuh indexer, and the Wazuh dashboard on the same host. This is usually enough for monitoring up to 100 endpoints and for 90 days of queryable/indexed alert data. The table below shows the recommended hardware for a quickstart deployment:		Following this quickstart implies deploying the Wazuh server, the Wazuh indexer, and the Wazuh dashboard on the same host. This is usually enough for monitoring up to 100 endpoints and for 90 days of queryable/indexed alert data. The table below shows the recommended hardware for a quickstart deployment:

	Agents		{\| class="wikitable"
			\|+ Keperluan Hardware
			\|-
			! Agents !! CPU !! RAM !! Storage (90 days)
			\|-
			\| 1–25 \|\| 4 vCPU \|\| 8 GiB \|\| 50 GB
			\|-
			\| 25–50 \|\| 8 vCPU \|\| 8 GiB \|\| 100 GB
			\|-
			\| 50–100 \|\| 8 vCPU \|\| 8 GiB \|\| 200 GB
			\|}

	~~CPU~~		For larger environments we recommend a distributed deployment. Multi-node cluster configuration is available for the Wazuh server and for the Wazuh indexer, providing high availability and load balancing.

	~~RAM~~

	~~Storage (90 days)~~

	~~1–25~~

	~~4 vCPU~~

	~~8 GiB~~

	~~50 GB~~

	~~25–50~~

	~~8 vCPU~~

	~~8 GiB~~

	~~100 GB~~

	~~50–100~~

	~~8 vCPU~~

	~~8 GiB~~

	~~200 GB~~

	For larger environments we recommend a distributed deployment. Multi-node cluster configuration is available for the Wazuh server and for the Wazuh indexer, providing high availability and load balancing.		===Operating system===

	~~Operating system~~
	Wazuh central components can be installed on a 64-bit Linux operating system. Wazuh recommends any of the following operating system versions:		Wazuh central components can be installed on a 64-bit Linux operating system. Wazuh recommends any of the following operating system versions:

	Amazon Linux 2		* Amazon Linux 2
			* CentOS 7, 8
			* Red Hat Enterprise Linux 7, 8, 9
			* Ubuntu 16.04, 18.04, 20.04, 22.04

	~~CentOS 7, 8~~		===Browser compatibility===

	~~Red Hat Enterprise Linux 7, 8, 9~~

	~~Ubuntu 16.04, 18.04, 20.04, 22.04~~

	~~Browser compatibility~~
	Wazuh dashboard supports the following web browsers:		Wazuh dashboard supports the following web browsers:

	Chrome 95 or later		* Chrome 95 or later
			* Firefox 93 or later
			* Safari 13.7 or later

	~~Firefox 93 or later~~		Other Chromium-based browsers might also work. Internet Explorer 11 is not supported.

	~~Safari 13.7 or later~~		==Installing Wazuh==

	~~Other Chromium-based browsers might also work. Internet Explorer 11 is not supported.~~

	~~Installing Wazuh~~
	Download and run the Wazuh installation assistant.		Download and run the Wazuh installation assistant.

			curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a

	~~curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a~~
	Once the assistant finishes the installation, the output shows the access credentials and a message that confirms that the installation was successful.		Once the assistant finishes the installation, the output shows the access credentials and a message that confirms that the installation was successful.

			INFO: --- Summary ---
			INFO: You can access the web interface https://<wazuh-dashboard-ip>
			User: admin
			Password: <ADMIN_PASSWORD>
			INFO: Installation finished.

	~~INFO: --- Summary ---~~
	~~INFO: You can access the web interface https://<wazuh-dashboard-ip>~~
	~~User: admin~~
	~~Password: <ADMIN_PASSWORD>~~
	~~INFO: Installation finished.~~
	You now have installed and configured Wazuh.		You now have installed and configured Wazuh.

	Access the Wazuh web interface with https://<wazuh-dashboard-ip> and your credentials:		Access the Wazuh web interface with https://<wazuh-dashboard-ip> and your credentials:

	Username: admin		Username: admin
			Password: <ADMIN_PASSWORD>
	Password: <ADMIN_PASSWORD>

	When you access the Wazuh dashboard for the first time, the browser shows a warning message stating that the certificate was not issued by a trusted authority. This is expected and the user has the option to accept the certificate as an exception or, alternatively, configure the system to use a certificate from a trusted authority.		When you access the Wazuh dashboard for the first time, the browser shows a warning message stating that the certificate was not issued by a trusted authority. This is expected and the user has the option to accept the certificate as an exception or, alternatively, configure the system to use a certificate from a trusted authority.
Line 95:		Line 72:
	Note You can find the passwords for all the Wazuh indexer and Wazuh API users in the wazuh-passwords.txt file inside wazuh-install-files.tar. To print them, run the following command:		Note You can find the passwords for all the Wazuh indexer and Wazuh API users in the wazuh-passwords.txt file inside wazuh-install-files.tar. To print them, run the following command:

	sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt		sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt

	If you want to uninstall the Wazuh central components, run the Wazuh installation assistant using the option -u or –-uninstall.		If you want to uninstall the Wazuh central components, run the Wazuh installation assistant using the option -u or –-uninstall.

Unknown user: Created page with "Quickstart Wazuh is a security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads. The solution is composed of a single universal agent a..."

2023-07-09T23:12:01Z

Created page with "Quickstart Wazuh is a security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads. The solution is composed of a single universal agent a..."

New page

Quickstart
Wazuh is a security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads. The solution is composed of a single universal agent and three central components: the Wazuh server, the Wazuh indexer, and the Wazuh dashboard. For more information, check the Getting Started documentation.

Wazuh is free and open source. Its components abide by the GNU General Public License, version 2, and the Apache License, Version 2.0 (ALv2).

This quickstart shows you how to install the Wazuh central components, on the same host, using our installation assistant. You can check our Installation guide for more details and other installation options.

Below you can find a section about the requirements needed to install Wazuh. It will help you learn about the hardware requirements and the supported operating systems for your Wazuh installation.

Requirements
Hardware
Hardware requirements highly depend on the number of protected endpoints and cloud workloads. This number can help estimate how much data will be analyzed and how many security alerts will be stored and indexed.

Following this quickstart implies deploying the Wazuh server, the Wazuh indexer, and the Wazuh dashboard on the same host. This is usually enough for monitoring up to 100 endpoints and for 90 days of queryable/indexed alert data. The table below shows the recommended hardware for a quickstart deployment:

Agents

CPU

RAM

Storage (90 days)

1–25

4 vCPU

8 GiB

50 GB

25–50

8 vCPU

8 GiB

100 GB

50–100

8 vCPU

8 GiB

200 GB

For larger environments we recommend a distributed deployment. Multi-node cluster configuration is available for the Wazuh server and for the Wazuh indexer, providing high availability and load balancing.

Operating system
Wazuh central components can be installed on a 64-bit Linux operating system. Wazuh recommends any of the following operating system versions:

Amazon Linux 2

CentOS 7, 8

Red Hat Enterprise Linux 7, 8, 9

Ubuntu 16.04, 18.04, 20.04, 22.04

Browser compatibility
Wazuh dashboard supports the following web browsers:

Chrome 95 or later

Firefox 93 or later

Safari 13.7 or later

Other Chromium-based browsers might also work. Internet Explorer 11 is not supported.

Installing Wazuh
Download and run the Wazuh installation assistant.

curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a
Once the assistant finishes the installation, the output shows the access credentials and a message that confirms that the installation was successful.

INFO: --- Summary ---
INFO: You can access the web interface https://<wazuh-dashboard-ip>
User: admin
Password: <ADMIN_PASSWORD>
INFO: Installation finished.
You now have installed and configured Wazuh.

Access the Wazuh web interface with https://<wazuh-dashboard-ip> and your credentials:

Username: admin

Password: <ADMIN_PASSWORD>

When you access the Wazuh dashboard for the first time, the browser shows a warning message stating that the certificate was not issued by a trusted authority. This is expected and the user has the option to accept the certificate as an exception or, alternatively, configure the system to use a certificate from a trusted authority.

Note You can find the passwords for all the Wazuh indexer and Wazuh API users in the wazuh-passwords.txt file inside wazuh-install-files.tar. To print them, run the following command:

sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt
If you want to uninstall the Wazuh central components, run the Wazuh installation assistant using the option -u or –-uninstall.

==Referensi==

* https://documentation.wazuh.com/current/quickstart.html