Wazuh Standalone Installation: Complete Guide for 2025

Published on: 2025-06-27
Author: AMJHOST Cyber Security Team

Wazuh is an open-source Security Information and Event Management (SIEM) platform offering threat detection, integrity monitoring, incident response, and compliance capabilities. This guide walks you through deploying Wazuh in standalone mode, perfect for small-scale environments or testing labs.

wazuh installation Complete Guide for 2025

🚀 Why Choose Wazuh Standalone?

Quick and simple deployment
Perfect for testing or small environments
All components (manager, indexer, dashboard) on a single host
Low resource usage and easy to manage

📋 System Requirements

OS: Ubuntu 22.04 LTS
RAM: 4 GB minimum
CPU: 2 cores
Disk: 20 GB minimum
Network: Static IP preferred

🛠️ Step-by-Step Installation

1. 📦 Update System and Install Dependencies

sudo apt update && sudo apt upgrade -y
sudo apt install curl apt-transport-https lsb-release gnupg -y

2. 🔑 Add Wazuh GPG Key and Repository

curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | sudo gpg --dearmor -o /usr/share/keyrings/wazuh.gpg

echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt stable main" | \
sudo tee /etc/apt/sources.list.d/wazuh.list

sudo apt update

3. ⚙️ Install Wazuh Manager

sudo apt install wazuh-manager -y
sudo systemctl enable wazuh-manager
sudo systemctl start wazuh-manager

4. 📦 Install Wazuh Indexer

curl -sO https://packages.wazuh.com/4.x/wazuh-install.sh
chmod +x wazuh-install.sh
sudo ./wazuh-install.sh --wazuh-indexer

5. 🖥️ Install Wazuh Dashboard

sudo ./wazuh-install.sh --dashboard

Access your Wazuh dashboard at: https://<your_server_ip>

Default credentials:
User: admin
Password: admin

⚠️ Change your password after first login for security.

6. 📡 Add Local Agent (Optional)

sudo apt install wazuh-agent -y

Edit /var/ossec/etc/ossec.conf to point to your manager IP. Then run:

sudo systemctl enable wazuh-agent
sudo systemctl start wazuh-agent

🔐 Hardening Tips

Use Let's Encrypt SSL certificates
Restrict access with firewalls (UFW/IPTables)
Enable MFA and use strong passwords
Keep system and Wazuh components updated regularly

📈 Why AMJHOST Recommends Wazuh

At AMJHOST, we deliver fully managed Wazuh solutions with:

Custom-branded dashboards and reports
Agent auto-installer and patching
PCI DSS, RBI, and ISO-mapped rules
Reseller management and multi-tenant hosting

📞 Ready to deploy Wazuh with confidence?

Contact AMJHOST Cyber Security at ceo@amjhost.online for enterprise-ready deployment.