Wazuh is a powerful open-source SIEM and security monitoring platform. In this article, I’ll walk you through the fastest way to install Wazuh 4.12 on an Ubuntu-based server using the official installation script.
Before installing any software, it’s always best practice to update your system packages:
sudo apt-get update
sudo apt-get dist-upgrade -y
This ensures your server is running the latest packages and avoids compatibility issues during the installation.
The Wazuh team provides a script that automates the installation of all core components. Run the command below:
curl -sO https://packages.wazuh.com/4.12/wazuh-install.sh && sudo bash ./wazuh-install.sh -a
This command will:
Once the installation is complete, the Wazuh Dashboard login details (admin username and password) will be shown only once in your terminal.
👉 Be sure to save or note this password securely — you won’t be able to see it again.
After installation, open your browser and navigate to:
https://<your-server-ip>
Use the admin
credentials displayed at the end of the installation process to log in.
After setting up Wazuh, here are a few important things you should consider:
local_rules.xml
Wazuh is an essential tool for any IT administrator looking to improve visibility, incident detection, and compliance. This quick setup guide helps you deploy a basic working instance. For advanced use cases and deeper integrations, refer to the official Wazuh documentation.
🔒 Stay secure and keep monitoring!