Re: Wazuh initials

[Pablo Ariel Gonzalez]

Hi TSC,

It's great news that you're testing Wazuh's product, we're going to fix this issue so you can start using it.

Initially it is important to indicate that ALMALINUX is not a version of GNU/Linux certified in Wazuh. This doesn't mean that it cannot work, just that it has not been certified yet. To see the list of supported operating systems you can access the following link.

With respect to the installation, at the end of it, the following fields should have been indicated, which are the access URL, the username and password.

  INFO: --- Summary ---
  INFO: You can access the web interface https://<wazuh-dashboard-ip>
      User: admin
      Password: <ADMIN_PASSWORD>
  INFO: Installation finished.


From what I see in your mail it seems that you have reached that point. In order to access you must modify the URL to include the IP address of the computer where you installed wazuh. For example, if the IP address of your server is 192.168.10.23, then the URL you must use to access Wazuh Dashboard will be: https://192.168.10.23

If you don't know the IP address of your server you could get it using commands like ifconfig or ip a (on linux), ipconfig (on windows) or by running a ping from another computer on your network to your server name.  If after trying this you still have problems accessing, I ask you to tell us about it and we will help you solve it.

I also remind you that if it is useful for your environment, there is the Wazuh cloud option. You could obtain additional information at the following link.

Thanks,

On Wednesday, June 29, 2022 at 5:20:15 PM UTC-3 TSC Consultores wrote:

Hi Everyone, 

I'm new in this, I did the installation of wazuh using this link: https://documentation.wazuh.com/current/quickstart.html

I did run this command: curl -sO https://packages.wazuh.com/4.3/wazuh-install.sh && sudo bash ./wazuh-install.sh -a and finishes successfully, 

I'm using ALMALINUX 8

But I can't access the wazuh web interface https://<wazuh-dashboard-ip>

Is there anything that I need to do? 

or where I can configure the ip's. 

this is the first results:

[xxx@wazuh /]# curl -sO https://packages.wazuh.com/4.3/wazuh-install.sh && sudo bash ./wazuh-install.sh -a -i

29/06/2022 14:20:31 INFO: Starting Wazuh installation assistant. Wazuh version: 4.3.5

29/06/2022 14:20:31 INFO: Verbose logging redirected to /var/log/wazuh-install.log

29/06/2022 14:20:32 WARNING: Hardware and system checks ignored.

29/06/2022 14:20:34 INFO: Wazuh repository added.

29/06/2022 14:20:34 INFO: --- Configuration files ---

29/06/2022 14:20:34 INFO: Generating configuration files.

29/06/2022 14:20:35 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.

29/06/2022 14:20:35 INFO: --- Wazuh indexer ---

29/06/2022 14:20:35 INFO: Starting Wazuh indexer installation.

29/06/2022 14:21:14 INFO: Wazuh indexer installation finished.

29/06/2022 14:21:14 INFO: Wazuh indexer post-install configuration finished.

29/06/2022 14:21:14 INFO: Starting service wazuh-indexer.

29/06/2022 14:21:26 INFO: wazuh-indexer service started.

29/06/2022 14:21:26 INFO: Initializing Wazuh indexer cluster security settings.

29/06/2022 14:21:31 INFO: Wazuh indexer cluster initialized.

29/06/2022 14:21:31 INFO: --- Wazuh server ---

29/06/2022 14:21:31 INFO: Starting the Wazuh manager installation.

29/06/2022 14:22:27 INFO: Wazuh manager installation finished.

29/06/2022 14:22:27 INFO: Starting service wazuh-manager.

29/06/2022 14:22:41 INFO: wazuh-manager service started.

29/06/2022 14:22:41 INFO: Starting Filebeat installation.

29/06/2022 14:22:50 INFO: Filebeat installation finished.

29/06/2022 14:22:51 INFO: Filebeat post-install configuration finished.

29/06/2022 14:22:51 INFO: Starting service filebeat.

29/06/2022 14:22:51 INFO: filebeat service started.

29/06/2022 14:22:51 INFO: --- Wazuh dashboard ---

29/06/2022 14:22:51 INFO: Starting Wazuh dashboard installation.

29/06/2022 14:23:34 INFO: Wazuh dashboard installation finished.

29/06/2022 14:23:34 INFO: Wazuh dashboard post-install configuration finished.

29/06/2022 14:23:34 INFO: Starting service wazuh-dashboard.

29/06/2022 14:23:35 INFO: wazuh-dashboard service started.

29/06/2022 14:23:49 INFO: Updated wazuh-wui user password in wazuh dashboard. Remember to restart the service.

29/06/2022 14:23:54 INFO: Initializing Wazuh dashboard web application.

29/06/2022 14:23:55 INFO: Wazuh dashboard web application initialized.

29/06/2022 14:23:55 INFO: --- Summary ---

29/06/2022 14:23:55 INFO: You can access the web interface https://<wazuh-dashboard-ip>

Thank you, 

[Mayler Saíd]

Hi, you need to open the ports on almalinux, than you can access you any computer;

Inside Almalinux:

$ firewall-cmd --zone=public --permanent --add-port 8080/tcp

$ firewall-cmd --reload

Change de ports to wazuh ports below

https://documentation.wazuh.com/current/getting-started/architecture.html

you can also disable the firewall usint systemctl stop firewalld .