Installing the Wazuh manager using the assisted installation method

Install the Wazuh manager as a single-node or multi-node cluster on a 64-bit (x86_64/AMD64 or AARCH64/ARM64) architecture using the assisted installation method. The Wazuh manager analyzes event data received from Wazuh agents and forwards the processed events to the Wazuh indexer.

Wazuh manager cluster installation

  1. Download the Wazuh installation assistant. Skip this step if you performed the initial configuration on the same server and the Wazuh installation assistant is already in your working directory:

    # curl -sO https://packages-staging.xdrsiem.wazuh.info/pre-release/5.x/installation-assistant/wazuh-install-5.0.0-beta2.sh
    
  2. Run the Wazuh installation assistant with the option --wazuh-manager followed by the node name to install the Wazuh manager. The node name must be the same one used in config.yml for the initial configuration, for example, manager:

    Note

    Make sure that a copy of the wazuh-install-files.tar, created during the initial configuration step, is placed in your working directory.

    # bash wazuh-install-5.0.0-beta2.sh --wazuh-manager manager -d pre-release
    

Your Wazuh manager is now successfully installed.

Disable Wazuh updates

We recommend disabling the Wazuh package repositories after installing all components on this server to prevent accidental upgrades.

Execute the following command only after completing all installations:

# sed -i "s/^deb /#deb /" /etc/apt/sources.list.d/wazuh.list
# apt update

Next steps

The Wazuh manager installation is now complete and you can proceed with installing the Wazuh dashboard. To perform this action, see the Installing the Wazuh dashboard using the assisted installation method section.