This page explains the main steps for nstalling Wazuh central components within a containerized environment. For more details we refer to the official documentation .
Wazuh central components:
The following pieces of software are necessary for the installation of Wazuh.
The deployment of Wazuh can be done as a single-node or multi-node stack.
For the sake of simplicity, we discuss here a single node deployment as one manager node would be used to monitor and analyze traffic from the registered agent. The deployment starts by cloning the Wazuh repository to our system.
git clone https://github.com/wazuh/wazuh-docker.git -b v4.7.2
The next step is to provide a group of certificates for each node in the stack to secure communication between the nodes. Execute the following command to get the desired certificates.
sudo docker-compose -f generate-indexer-certs.yml run --rm generator
This saves the certificates into the /single-node/config/wazuh_indexer_ssl_certs directory.
Start the Wazuh single-node deployment using docker-compose.
sudo docker-compose up
By running the following command it can be seen that the above command starts three containers for the above three mentioned components which are running for:
These can be seen by:
sudo docker ps -a
To execute commands in the containers, you can execute the respective shell:
docker exec -it single-node-wazuh.manager-1 bash
docker exec -it single-node-wazuh.dashboard-1 bash
docker exec -it single-node-wazuh.indexer-1 bash