Single minimum setup.

[New to wazuh]

Hi All,

           I am trying to test out this excellent software. So I am on alma linux 9 and here is how I installed it by following the steps in the website.

rpm --import https://packages.wazuh.com/key/GPG-KEY-WAZUH

 echo -e '[wazuh]\ngpgcheck=1\ngpgkey=https://packages.wazuh.com/key/GPG-KEY-WAZUH\nenabled=1\nname=EL-$releasever - Wazuh\nbaseurl=https://packages.wazuh.com/4.x/yum/\npriority=1' | tee /etc/yum.repos.d/wazuh.repo 

yum -y install wazuh-manager 

systemctl start wazuh-manager

Initially I saw wazuh was heavy then now I notice its not taking up so much of my cpu usage. What I would like to know is that my setup is purely for single server setup. Does the step above are good enough for it or do I need to go with things like the indexer, filebeat etc. Another thing since I got no remote agent which are the things I can safely off to reduce resource consumption. Also I would like to disable the web dashboard as this will further minimize the possibility for attacks. Thank you in advance.

[Olamilekan Abdullateef Ajani]

Hello ,

My question would be what is your use case regarding this test? Because your installation as you have shared only has the wazuh server, and with this, you have not completed the minimum setup.

For the wazuh instance to be complete, you need the wazuh indexer, the wazuh server, which also comprises of filebeat and the wazuh dashboard for alert and event visualization.
I would imploy you to check out the architecture guide and the components guide for more information about the setup.

Then let me know if you have further questions around this.