RU | EN | DE

Client

Step 1. Logging into the Web Interface (Dashboard) 🖥️

  1. Open a browser (Chrome, Firefox, Edge) on the computer that has access to the server’s IP (if SSH worked from your real PC, open it there).
  2. In the address bar type: 👉 https://192.168.0.12 (Or whatever the current IP of Ubuntu is).

⚠️ Important: “SECURITY ERROR”

The browser will immediately scream in red: “Your connection is not private”.

  • Why: We don’t have a purchased SSL certificate (we’re not Google), we’re using a self-signed one.
  • What to do:
    1. Click Advanced.
    2. Click Proceed to… (unsafe).

Step 2. Login 🔑

The beautiful Wazuh login window opens.

  • Username: admin
  • Password: (the one you saved) After logging in you’ll see the welcome screen and system check.

Step 3. Adding the First “Agent” (Your Windows) 🕵️‍♂️

Unlike Zabbix where we were editing configs manually, Wazuh does everything itself via PowerShell.

  1. On the main screen click the large blue Add agent button (or go to the menu on the upper left Agents Deploy new agent).
  2. Fill in the simple form:
    • Select OS: Windows.
    • Server address: Enter the Wazuh server IP (192.168.0.12).
    • Assign a name: Type, for example, My-Real-PC.
  3. A long command appears below (Deploy and install the agent).
  4. Click the Copy command button.

Step 4. Run on the Computer 🚀

  1. Open PowerShell on your real computer as Administrator (mandatory!).
  2. Paste the copied command and press Enter.
  3. It will download the agent, install it, and configure itself automatically.
  4. After installation launch the agent with the command:
NET START Wazuh

Return to the browser. After a minute the message should appear: “Agent connected” or the agent count will become 1.

Ports used:

1514/1515

Client config file: C:\Program Files (x86)\ossec-agent\ossec.conf