Wazuh
- git clone https://github.com/wazuh/wazuh-docker.git -b v4.9.2
- cd wazuh-docker/single-node/
- modify docker-compose.yml
- #change 443 to your port
- #modify memory or CPU limit
- docker-compose -f generate-indexer-certs.yml run --rm generator
- docker-compose up -d
- open https://ip:your_port or space(443) to check is running
- admin:SecretPassword
- modify default password
- Agent
- https://wazuh.com/install/
- docker ps
- docker exec -it single-node-wazuh.manager-1 or com-id /bin/bash
- bash-5.2# /var/ossec/bin/manage_agents
- ****************************************
- * Wazuh v4.9.2 Agent manager. *
- * The following options are available: *
- ****************************************
- (A)dd an agent (A).
- (E)xtract key for an agent (E).
- (L)ist already added agents (L).
- (R)emove an agent (R).
- (Q)uit.
- Choose your action: A,E,L,R or Q:
- 1.Press (A) to set a new agent with name (Computer's name), IP (any)
- 2.Press (L) to find ID 00x
- 3.Press (E) to create auth key
- get the auth key to keyin agent on win or linux
- check wazuh run on services.msc
沒有留言:
張貼留言