Installing Wazuh server

The Wazuh server can be installed on any Unix-like operating system. It is most commonly installed on Linux. The installation process is easier via the packages if one is available for your distribution, however, building and installing from sources is also pretty straightforward.

There are two components that are usually installed on a Wazuh server: the manager and the API. In addition, Filebeat is needed to forward alerts to Elastic Stack.

There are several options for installing the Wazuh server depending on the operating system and whether or not you wish to build from sources. Consult the table below and choose how to proceed:

Operative system

Version

Amazon Linux

1 or greater

CentOS

6 or greater

Debian

7 or greater

Fedora

22 or greater

Oracle Linux

6 or greater

OpenSUSE

42 or greater

Red Hat Enterprise Linux

6 or greater

SUSE

12

Ubuntu

12.04 or greater

There are some related additional configurations that can be applied:

Note

Installing Wazuh server on a 64-bit operating system is highly recommended since the Wazuh API is not available on 32-bit platforms. Without the Wazuh API, much of the functionality of the Wazuh Kibana App will not work. Similarly, if you are using Red Hat or CentOS for your Wazuh server platform, make sure it is version 6 or higher to properly install Wazuh API.