I am planning to build a customized, all-in-one Wazuh deployment (Indexer, Server, and Dashboard) from source, on a single Ubuntu 22.04 LTS system—similar to how the wazuh.ova appliance works.
My goal is to:
Compile all Wazuh components from source code
Customize the platform as needed
Deploy and run it on a standalone server (no Docker or multi-node setup)
I would highly appreciate it if you could provide:
A step-by-step guide or best practices for building Wazuh from source (version 4.12+ preferred)
Suggestions for certificate generation, inter-component communication, and configuration
Any caveats or tips for resource allocation, JVM tuning, or security hardening when running all components together on one host
If there are official build scripts or recommended custom deployment methods for this use case, please do let me know.
Thank you in advance for your support!
For a custom, all-in-one Wazuh deployment from source (version 4.12+), running all components (Manager, Indexer, and Dashboard) on a single Ubuntu 22.04 LTS host, it's definitely possible and similar in concept to the .ova appliance — just without Docker or multi-node architecture.
To get started, I recommend reviewing the following guides:
📘 Build and Deployment ReferencesWazuh Manager from source: https://documentation.wazuh.com/current/deployment-options/wazuh-from-sources/wazuh-server/index.html
Wazuh Indexer and Dashboard (tar packages): There is no official documentation, you can check the Developer guide in each repository (https://github.com/wazuh/wazuh-indexer / https://github.com/wazuh/wazuh-dashboard)
Certificate generation for secure communication : https://documentation.wazuh.com/current/user-manual/wazuh-server-cluster/certificates-deployment.html