Wazuh Installation

Vorbereitung

• hostname

wazuh.lab.internal

• hostname -i

192.168.168.99

• apt install -y curl gpg

Webseite

• https://documentation.wazuh.com/current/quickstart.html

Installing Wazuh

• Vorher neuste Version checken

• apt install -y curl gpg
• curl -sO https://packages.wazuh.com/4.11/wazuh-install.sh && sudo bash ./wazuh-install.sh -a -i

<pre>
05/06/2024 14:47:43 INFO: Starting Wazuh installation assistant. Wazuh version: 4.7.5
05/06/2024 14:47:43 INFO: Verbose logging redirected to /var/log/wazuh-install.log
05/06/2024 14:47:49 INFO: --- Dependencies ----
05/06/2024 14:47:49 INFO: Installing gawk.
05/06/2024 14:47:52 WARNING: Hardware and system checks ignored.
05/06/2024 14:47:52 INFO: Wazuh web interface port will be 443.
05/06/2024 14:47:55 INFO: --- Dependencies ----
05/06/2024 14:47:55 INFO: Installing apt-transport-https.
05/06/2024 14:47:56 INFO: Installing software-properties-common.
05/06/2024 14:48:29 INFO: Wazuh repository added.
05/06/2024 14:48:29 INFO: --- Configuration files ---
05/06/2024 14:48:29 INFO: Generating configuration files.
05/06/2024 14:48:31 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
05/06/2024 14:48:31 INFO: --- Wazuh indexer ---
05/06/2024 14:48:31 INFO: Starting Wazuh indexer installation.
05/06/2024 14:49:40 INFO: Wazuh indexer installation finished.
05/06/2024 14:49:40 INFO: Wazuh indexer post-install configuration finished.
05/06/2024 14:49:40 INFO: Starting service wazuh-indexer.
05/06/2024 14:49:54 INFO: wazuh-indexer service started.
05/06/2024 14:49:54 INFO: Initializing Wazuh indexer cluster security settings.
05/06/2024 14:50:05 INFO: Wazuh indexer cluster initialized.
05/06/2024 14:50:05 INFO: --- Wazuh server ---
05/06/2024 14:50:05 INFO: Starting the Wazuh manager installation.
05/06/2024 14:53:38 INFO: Wazuh manager installation finished.
05/06/2024 14:53:38 INFO: Starting service wazuh-manager.
05/06/2024 14:54:02 INFO: wazuh-manager service started.
05/06/2024 14:54:02 INFO: Starting Filebeat installation.
05/06/2024 14:54:10 INFO: Filebeat installation finished.
05/06/2024 14:54:11 INFO: Filebeat post-install configuration finished.
05/06/2024 14:54:11 INFO: Starting service filebeat.
05/06/2024 14:54:12 INFO: filebeat service started.
05/06/2024 14:54:12 INFO: --- Wazuh dashboard ---
05/06/2024 14:54:12 INFO: Starting Wazuh dashboard installation.
05/06/2024 15:05:27 INFO: Wazuh dashboard installation finished.
05/06/2024 15:05:27 INFO: Wazuh dashboard post-install configuration finished.
05/06/2024 15:05:27 INFO: Starting service wazuh-dashboard.
05/06/2024 15:05:28 INFO: wazuh-dashboard service started.
05/06/2024 15:06:11 INFO: Initializing Wazuh dashboard web application.
05/06/2024 15:06:12 INFO: Wazuh dashboard web application initialized.
05/06/2024 15:06:12 INFO: --- Summary ---
05/06/2024 15:06:12 INFO: You can access the web interface https://<wazuh-dashboard-ip>:443
    User: admin
    Password: WtB+D5jis?jJLJdsc.7iV1vCD?0+h+aw
05/06/2024 15:06:12 INFO: --- Dependencies ----
05/06/2024 15:06:12 INFO: Removing gawk.
05/06/2024 15:06:20 INFO: Installation finished.
root@wazuh:~# 

Passwort ändern

• /usr/share/wazuh-indexer/plugins/opensearch-security/tools/wazuh-passwords-tool.sh -u admin -p 123-Start