Tutorial: Wazuh SIEM - Installation and Configuration (Complete Steps)

Wazuh is a free, open-source and enterprise-ready security monitoring solution for threat detection, integrity monitoring, incident response, and compliance.

This video explains the process of installing and configuring Wazuh SIEM and its agent running Windows OS.

References:

[killerbees]

thank you for leaving the error in there and the troubleshooting

[renanrivera]

Thanks Semi, I'm not aware that there was a prebuild VM. great tutorial!

[maekee]

What about the nmap and incorrect logins??

[tester]

Dtunggu tutor selanjutnya utk kubernetes pak bagi yg gapake vmware

[SuperChelseaSW]

Nice vid. Make a demo how owlH works. Thanks!

[rajeshkhanna]

after doing this, I am not getting the security events, could you please help what should I do here?

[raghuvasudevarao]

Hi Semi, Amazing Video, just a question, when i import the ova in VM workstation, ipv6 is coming up not ipv4. Also, where we can check for the IP address of the interface in the VM or in the desktop

[Samran_Shahzad]

Hi, anyone tell me that how can I confirm that my linux rsyslog is coming in wazuh dashboard how to check that?? How to configure rsyslog of kali linux without adding as an agent ??

[rafaelcortestorres]

hi, thanks for the tutorial, How can I configure the maximum log retention time?

[muhammadismailkashif]

hi i am trying to install wazuh-4.3.4_2 but not ale to get my dashboard (wazuh dashboard server is not ready yet) only this i found on my screen. Please guide me

[jdiscount]

You really need to write a script before recording these videos and edit out nonsense, you clicked about 50 times back and forth before getting into the security logs.

[muharaveen]

Hi! I'm getting the error Wazuh dashboard is not ready yet. What should I do?

[SajaksFavorites]

Care to share HOWTO for collecting syslog Network devices log with WAZUH

[sadmansakib]

Hello Sir, how can I add a mobile and router device in wazuh for monitoring?

[DodiVenturaz]

Thanks for tutorial Pak Semi, kalau yg saya tangkap dari penjelasan video ini, agent itu client atau host yg dimonitoring, si agent harus jalanin wazuh agent dan memasukkan key yg didapat dari wazuh, di video ini kan agentnya pakai windows, pertanyaan saya, gimana kalau yg jadi agent itu misalkan router atau switch, Pak?

[tebogomashiane]

I don't return the default IP address, what must I now do?

[chundurusriharsha]

I dont have mmc in my system. Then what should i do?

[SkreenGG]

Man this is a great video, an excellent tutorial. You did a wonderful job Mr. Yulianto.

One question, what happens if your agent is installed on a PC that receives it's IP address via DHCP and does not have a static IP? Will the system still connect with the agent if the PC IP change?

[ishitashakya]

Not working for me in browser it says "cant reach this page". guide me

[.ayirp.]

Hello sir,

The files recovered by "photorec" software containing approximately 3000 files with extension .eCryptfs how to recover these files??