Deploy Wazuh di Cloudzy VPS

Akses Dashboard Wazuh

URL: https://<SERVER_IP>

Login credentials:

Akses Password Tersimpan

Semua password default untuk Wazuh Manager, API, Indexer, dan agen tersedia di dalam arsip tar.

File: /root/wazuh-install-files.tar

Untuk mengekstrak password:

tar -O -xvf /root/wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt

Open Ports

Pastikan port-port berikut diizinkan di firewall:

File dan Direktori Penting

Password archive: /root/wazuh-install-files.tar
File konfigurasi Manager: /var/ossec/etc/ (contains ossec.conf, rules, decoders)
Manager logs: /var/ossec/logs/ossec.log
Direktori data Manager: /var/ossec/queue/, /var/ossec/active-responses/
Dashboard configuration: /etc/wazuh-dashboard/ (contains dashboard.yml, SSL certificates)
Dashboard logs: /var/log/wazuh-dashboard/
Indexer configuration: /etc/wazuh-indexer/ (contains elasticsearch.yml, roles)
Indexer data: /var/lib/wazuh-indexer/
Indexer logs: /var/log/wazuh-indexer/

Service Management

Check status:

systemctl status wazuh-manager
systemctl status wazuh-api
systemctl status wazuh-dashboard
systemctl status wazuh-indexer

Restart services:

systemctl restart wazuh-manager wazuh-api wazuh-dashboard wazuh-indexer

Viewing logs:

tail -f /var/ossec/logs/ossec.log
tail -f /var/log/wazuh-dashboard/wazuh-dashboard.log
tail -f /var/log/wazuh-indexer/wazuh-indexer.log

Catatan dan Rekomendasi

Dashboard Wazuh berjalan di HTTPS secara default.
Ensure ports 443, 9200, 55000, 1514, and 1515 dibuka agar semua fitur berfungsi.
Gunakan password yang telah diekstrak di /root/wazuh-install-files.tar untuk registrasi agen dan akses API.

Related apps.