Installing Wazuh Central Components Natively on Ubuntu Server

This guide provides a streamlined procedure for installing the Wazuh indexer, Wazuh server, and Wazuh dashboard on a single Ubuntu node. This native installation avoids the complexities of container networking and volume permissions. 
 
 Prerequisites 
 
 A fresh Ubuntu Server installation (Recommended: 22.04 or 24.04 LTS). 
 Root or sudo privileges. 
 Minimum Hardware: 8 vCPU, 16 GB RAM (Wazuh is resource-intensive). 
 
 
 Step 1: System Preparation 
 Before starting the installation, ensure the OS is up to date and the identity of the server is established. 
 1. Set the Hostname 
 Identify the server clearly on your network (e.g., SecuServer). 
 sudo hostnamectl set-hostname SecuServer 
 2. Update System Packages 
 Ensure all base repositories and installed packages are current. 
 sudo apt update && sudo apt upgrade -y 
 3. Reboot 
 Apply any kernel updates or hostname changes. 
 sudo reboot 
 
 Step 2: The Wazuh Installation 
 Wazuh provides an installation assistant that automates certificate generation and component linking. We use a version-specific URL to ensure the script downloads correctly. 
 1. Download and Run the Assistant 
 The -a flag performs an automated all-in-one installation. 
 curl -sO https://packages.wazuh.com/4.14/wazuh-install.sh && sudo bash ./wazuh-install.sh -a 
 2. Wait for Completion 
 The script will install the Indexer, Server, and Dashboard. This typically takes 5–15 minutes depending on hardware and network speed. 
 
 Step 3: Securing Credentials 
 Once the installation finishes, the terminal will display a Summary block. 
 CRITICAL: Copy the admin password immediately. It is randomly generated and required for the first login. 
 If you lose this password, you can retrieve it from the installation files by running: 
 sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt 
 
 Step 4: Accessing the Dashboard 
 Wazuh natively listens on port 443 and enforces HTTPS . 
 
 Open your browser and navigate to: https://<your_server_ip> 
 Bypass SSL Warning: Since the certificates are self-signed by the script, your browser will show a "Not Secure" warning. Click Advanced and then Proceed . 
 Login: Use the username admin and the password saved from Step 3. 
 
 
 Troubleshooting Note: Port 80 vs. 443 
 If the page refuses to connect, ensure you are explicitly typing https:// in the address bar. Wazuh does not listen on standard HTTP (Port 80) and will not automatically redirect you.