Skip to content

Commit

Permalink
[update] Deploy Wazuh Cluster through the Linode Marketplace (#7004)
Browse files Browse the repository at this point in the history
* update agent info

* wazuh pr review

* Fix formatting

---------

Co-authored-by: hmorris <[email protected]>
Co-authored-by: Anna Bracha <[email protected]>
Co-authored-by: Matthew Wildman <[email protected]>
  • Loading branch information
4 people authored Jun 24, 2024
1 parent 236e670 commit 081235d
Showing 1 changed file with 30 additions and 4 deletions.
34 changes: 30 additions & 4 deletions docs/products/tools/marketplace/guides/wazuh/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
title: "Deploy Wazuh through the Linode Marketplace"
description: "Deploy Wazuh on a Linode Compute Instance. This provides you with an open source a security monitoring solution."
published: 2021-11-12
modified: 2024-06-06
modified: 2024-06-24
keywords: ['security','vulnerability','monitoring']
tags: ["marketplace", "linode platform", "cloud manager"]
external_resources:
Expand Down Expand Up @@ -51,7 +51,7 @@ aliases: ['/guides/deploying-wazuh-marketplace-app/','/guides/wazuh-marketplace-

This file contains all of your Wazuh credentials. The admin user and its associated password are needed when following the [Access the Wazuh App](#access-the-wazuh-app) section below.

```file {title="/root/.deployment-secrets.txt"}
```file {title="/home/$SUDO_USER/.credentials"}
# Admin user for the web user interface and Wazuh indexer. Use this user to log in to Wazuh dashboard
indexer_username: 'admin'
indexer_password: '3O*NRpS5B5*sohufTz?TuM.Vef6zoN5d'
Expand Down Expand Up @@ -93,8 +93,34 @@ aliases: ['/guides/deploying-wazuh-marketplace-app/','/guides/wazuh-marketplace-
![Screenshot of the login page](wuzah-login.png)
Now that you’ve accessed your Wazuh instance, you need to configure a [Wazuh Agent](https://documentation.wazuh.com/current/installation-guide/wazuh-agent/index.html) on the server you'd like to monitor with Wazuh.
### Set up a Wazuh Agent
Now that you’ve accessed your Wazuh instance, you need to configure a [Wazuh Agent](https://documentation.wazuh.com/current/installation-guide/wazuh-agent/index.html) on the server you'd like to monitor with Wazuh. Before you add the agent, allow the server you want to install the agent on access to ports '1514' and '1515' on your Wazuh instance. You can run the following ufw commands to do so:

```command
sudo ufw allow from $AGENTSERVERIP to any port 1514 proto tcp
sudo ufw allow from $AGENTSERVERIP to any port 1515 proto tcp
```

**Note:** Update `$AGENTSERVERIP` with the IP address you want to install the wazuh-agent

Once the firewall rules are added, you can now follow the steps in the Wazuh UI to deploy the Wazuh Agent. The Agent installation asks you for the system package you are installing the agent on (RPM/DEB/Windows/macOS), the *Server Address* (Domain or IP address of your Wazuh), and the *Agent Name* (unique identifier for the instance you are installing the agent on).

- **Select the package to download and install on your system:** RPM, DEB, Windows, macOS (Example: DEB amd64)
- **Server address:** Domain or IP address of your newly installed Wazuh instance (Example: wazuhdomain.tld )
- **Assign an agent name:** A unique identifier for the instance you are installing the agent (Example: database1)

Once you enter that information, Wazuh displays the installation commands:

```command
wget https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-agent/wazuh-agent_4.7.5-1_amd64.deb && sudo WAZUH_MANAGER='wazuhdomain.tld' WAZUH_AGENT_NAME='database1' dpkg -i ./wazuh-agent_4.7.5-1_amd64.deb
```
```command
sudo systemctl daemon-reload
sudo systemctl enable wazuh-agent
sudo systemctl start wazuh-agent
```

For more documentation on Wazuh, check out [the official Wazuh documentation](https://documentation.wazuh.com/current/installation-guide/index.html) to learn how to further utilize your instance.

{{% content "marketplace-update-note-shortguide" %}}
{{% content "marketplace-update-note-shortguide" %}}

0 comments on commit 081235d

Please sign in to comment.