Installing and
Configuring
CYBR 508 Assignment 6.1 Wazuh
Contents
Introduction............................................................................................................... 2
Systems configuration.................................................................................................. 2
Wazuh Server:......................................................................................................... 2
Linux Client:.......................................................................................................... 2
Linux VM Installation.................................................................................................. 4
Wazuh Server Installation.............................................................................................. 5
Wazuh Web Interface Configuration.............................................................................. 5
Network Configuration................................................................................................. 6
Linux Agent Installation................................................................................................ 7
Verification of Integration............................................................................................. 8
Introduction
In today's digital world, the importance of security measures cannot be ignored. Organizations
increasingly rely on Security Information and Event Management (SIEM) solutions to monitor, detect,
and respond to security threats in real time. Wazuh, an open-source SIEM solution that can be used to
log analysis, intrusion detection, vulnerability detection, and more.
This report details the process of installing and configuring Wazuh as part of CYBR 508 Assignment
6.1. The primary objective is to set up a Wazuh server on a Linux virtual machine (VM) and deploy a
Wazuh agent on another LinuxVM.
Throughout this assignment, we will explore the necessary system requirements, the configuration of
VirtualBox for creating and managing VMs, and the step-by-step installation of the Wazuh server and
agent.
Systems configuration
Wazuh Server:
For server ubuntu mate iso was used, which 2 processors and 6 gigabytes of ram with attached 50
gigabytes of hardisk as per requirement given on Wazuh website.
Linux Client:
Same linux image was use to create a linux client, with 2 gigabytes of ram, 1
processor and 25 gigabytes of hardisk.
Linux VM Installation
For installation of both VMs. Unattendedly installation was used for time saving
and simplicity.
Wazuh Server Installation
On the server following command was used to install and do initial setup of the
Wazuh server command : curl -sO [Link]
[Link] && sudo bash ./[Link] -a
At the end of installation userser name and password was provided.
Wazuh Web Interface Configuration
The web terminal of wazuh can be access by entering [Link] in browser.
After which we can use given username and password to login the terminal.
After login the dashboard is the first page:
Network Configuration
For network connection NAT network was created with 24 subnet mask.
Linux Agent Installation
After logging into the web terminal endpoint was added as it was an DEB amd64,
Following command was run on client pc to install endpoint:
command : wget [Link]
1_amd64.deb && sudo WAZUH_MANAGER='[Link]' dpkg -i ./wazuh-agent_4.8.1-1_amd64.deb
After installation to run and enable the endpoint following commands was used:
sudo systemctl daemon-reload
sudo systemctl enable wazuh-agent
sudo systemctl start wazuh-agent
Verification of Integration
After the registration of the endpoint in client VM it can be seen in the
dashboard.