Onnowpurbo at 03:48, 22 September 2025

2025-09-22T03:48:27Z

Onnowpurbo: Created page with "Baik, saya kasih panduan step-by-step instalasi Wazuh di Ubuntu 24.04. Wazuh biasanya dipasang dalam bentuk Wazuh server (manager + indexer + dashboard), atau **Wazuh..."

2025-09-22T03:47:28Z

Created page with "Baik, saya kasih panduan step-by-step instalasi **Wazuh di Ubuntu 24.04**. Wazuh biasanya dipasang dalam bentuk **Wazuh server (manager + indexer + dashboard)**, atau **Wazuh..."

New page

Baik, saya kasih panduan step-by-step instalasi **Wazuh di Ubuntu 24.04**.
Wazuh biasanya dipasang dalam bentuk **Wazuh server (manager + indexer + dashboard)**, atau **Wazuh agent** di endpoint.
Di sini saya jelaskan instalasi **all-in-one Wazuh server** untuk uji coba/lab (production biasanya dipisah per komponen).

---

## 🔹 1. Persiapan

Pastikan sistem sudah update:

```bash
sudo apt update && sudo apt upgrade -y
```

Install paket pendukung:

```bash
sudo apt install curl apt-transport-https unzip wget gnupg lsb-release software-properties-common -y
```

---

## 🔹 2. Tambah Repository Wazuh

Import GPG key:

```bash
curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | sudo gpg --dearmor -o /usr/share/keyrings/wazuh.gpg
```

Tambahkan repo:

```bash
echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt stable main" | \
sudo tee /etc/apt/sources.list.d/wazuh.list
```

Update:

```bash
sudo apt update
```

---

## 🔹 3. Instal Wazuh Manager

```bash
sudo apt install wazuh-manager -y
```

Jalankan service:

```bash
sudo systemctl daemon-reload
sudo systemctl enable wazuh-manager
sudo systemctl start wazuh-manager
sudo systemctl status wazuh-manager
```

---

## 🔹 4. Instal Wazuh Indexer (ElasticSearch fork)

```bash
sudo apt install wazuh-indexer -y
```

Enable & start:

```bash
sudo systemctl enable wazuh-indexer
sudo systemctl start wazuh-indexer
```

---

## 🔹 5. Instal Wazuh Dashboard (Web UI)

```bash
sudo apt install wazuh-dashboard -y
```

Enable & start:

```bash
sudo systemctl enable wazuh-dashboard
sudo systemctl start wazuh-dashboard
```

---

## 🔹 6. Akses Dashboard

Default URL:

```
https://<IP-server>:5601
```

Login awal biasanya:

* **User:** `admin`
* **Password:** bisa dicek dengan:

```bash
sudo cat /etc/wazuh-dashboard/initial_admin_password
```

---

## 🔹 7. Tambah Wazuh Agent (Contoh di Ubuntu)

```bash
sudo apt install wazuh-agent -y
```

Edit konfigurasi:

```bash
sudo nano /var/ossec/etc/ossec.conf
```

Ubah bagian:

```xml
<server>
<address>IP_WAZUH_MANAGER</address>
</server>
```

Jalankan agent:

```bash
sudo systemctl enable wazuh-agent
sudo systemctl start wazuh-agent
```

---

## 🔹 8. Verifikasi

* Cek log manager:

```bash
sudo tail -f /var/ossec/logs/ossec.log
```
* Cek agent status:

sudo /var/ossec/bin/agent_control -ls

👉 Dengan langkah di atas, Wazuh sudah bisa berjalan di Ubuntu 24.04 dengan **Manager + Indexer + Dashboard**.

Mau saya bikinkan juga **versi instalasi via Docker Compose (lebih cepat dan rapi)** atau cukup native saja seperti ini?

Cyber Security: Wazuh Install Docker - Revision history

Onnowpurbo at 03:48, 22 September 2025

Onnowpurbo: Created page with "Baik, saya kasih panduan step-by-step instalasi **Wazuh di Ubuntu 24.04**. Wazuh biasanya dipasang dalam bentuk **Wazuh server (manager + indexer + dashboard)**, atau **Wazuh..."

Onnowpurbo: Created page with "Baik, saya kasih panduan step-by-step instalasi Wazuh di Ubuntu 24.04. Wazuh biasanya dipasang dalam bentuk Wazuh server (manager + indexer + dashboard), atau **Wazuh..."