Scribd
Upload
2 views5 pages

Installation

The document outlines the installation process for Wazuh, including downloading the installation assistant and configuration file, editing the config.yml, and generating necessary certificates and passwords. It details the steps to install the Wazuh Indexer, start the cluster, test the indexer connection, and check the cluster status. Finally, it recommends disabling auto updates for Wazuh.

Uploaded by

Ananya Nair
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
2 views5 pages

Installation

The document outlines the installation process for Wazuh, including downloading the installation assistant and configuration file, editing the config.yml, and generating necessary certificates and passwords. It details the steps to install the Wazuh Indexer, start the cluster, test the indexer connection, and check the cluster status. Finally, it recommends disabling auto updates for Wazuh.

Uploaded by

Ananya Nair
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

Download the Wazuh installation assistant and the configuration file.

Wazuh Indexer = a database/search engine that stores and searches security logs.

Command used to open the file:


nano [Link]
Edit ./[Link] and replace the node names and IP values with your device IP

Ctrl + O : to save the file

Ctrl + X : Exit the file

Step 4: Generate certificates & passwords

Run:

bash [Link] --generate-config-files


📌 What happens:

 Creates:

o SSL certificates (security)

o Passwords

o Cluster key

 Stores everything in:

[Link]

STAGE 2: Install Wazuh Indexer

Make sure this file exists:

ls [Link]

Now install:

bash [Link] --wazuh-indexer node-1

STAGE 3: Start the cluster

📍 Step 6: Start the Wazuh indexer cluster

Run:

bash [Link] --start-cluster

📌 What this does:


 Activates certificates

 Starts indexer service

 Initializes the cluster

⚠️Run this ONLY ONCE

Step 8: Test indexer connection

Replace IP with your server IP:

curl -k -u admin [Link]

Enter the password when asked.

✅ If successful, you will see:

 node name

 cluster name

 OpenSearch version

🎉 This means Indexer is working

Step 9: Check cluster status


curl -k -u admin [Link]

INAL STEP: Disable Wazuh updates (recommended)

📍 Step 10: Disable auto updates

You might also like