Install the Wazuh server as a single-node or multi-node cluster with the aid of the Wazuh installation assistant. The Wazuh server is in charge of analyzing the data received from the agents and triggering alerts when threats or anomalies are detected. This central component includes the Wazuh manager and Filebeat.
Download the Wazuh installation assistant.
# curl -sO https://packages.wazuh.com/4.3/wazuh-install.sh
Run the assistant with the option
--wazuh-serverfollowed by the node name to install the Wazuh server. The node name must be the same one used in
config.ymlfor the initial configuration, for example,
Make sure that a copy of the
wazuh-install-files.tar, created during the initial configuration step, is placed in your working directory.
# bash wazuh-install.sh --wazuh-server wazuh-1
Your Wazuh server is now successfully installed.
If you want a Wazuh server single-node cluster, everything is set and you can proceed directly with Installing the Wazuh dashboard using the assistant.
If you want a Wazuh server multi-node cluster, repeat this process on every Wazuh server node.
The Wazuh server installation is now complete, and you can proceed with installing the Wazuh dashboard. To perform this action, see the Installing the Wazuh dashboard using the assistant section.