8 ай бұрын
Жыл бұрын
Жыл бұрын
Жыл бұрын
Пікірлер
@divyanshggu9707 4 күн бұрын
I followed your steps but I am not able to add agents, like when I add agents everything runs smoothly, but not able to see any agents.
@jiggyMK 26 күн бұрын
Thanx for the great video. One remark: the command to change the port for the dashboard is wrong in both your video and in the official guide (I suppose you got it from there). When using the proposed syntax "-p|--port <port_number>" an error is received. The "-p|" part should not be used. Correct way is to just use --port <port_number>
@unreal-labs 26 күн бұрын
Yes, you are right
@JonathanIonescu Ай бұрын
when i look at my output in the tftp server it creates the backup config but when i open the notepad file its format is wrong. it's not structured like a proper show run command. its running off the edge of the screen and is one conglomerate, not readable. any idea how to fix?
@liaolucia3198 Ай бұрын
Thanks for helping me to picture the configuration. May I have a question? Has automatic backup of configuration with the Kron or archive on the C1300? I did find some documents showing but when tested on C1300, it didn't have the command on it. Or is there another command that can automatically back up the TFTP server?
@adayinlife1001 3 ай бұрын
Please help me, I have 3 agents that installed successfully on Wazuh but after configs send messages via telegram and email alerts. There is only logs of an agent send logs, not all. How to fix, thank in advance.
@KisaneFR 3 ай бұрын
Hi, I followed the instructions and everything works, but now I'm being asked to add a 3rd node. Basically I modify the config.yml file, drop the tar file of the master node on the new node and reproduce the same steps as the wazuh-2 node?
@unreal-labs 3 ай бұрын
Yup that should get you up and running.
@noypiwerpo 3 ай бұрын
Just saw your video. I have a question. Will this overwrite your backup if you schedule it on a monthly occurrence?
@deenthebean1337 3 ай бұрын
I'm no expert, but I believe it won't overwrite. I think it only overwrites if the files have the same name. Using $t can be useful
@unreal-labs 3 ай бұрын
Yes it will overwrite. Adding $h or $t will add date and time which would be recommended if you needed multiple versions. I have seen some issues with Cisco IOS XE images that struggle with those variables. You could do tftp://ip_of_tftp_server/$h__$t (which would add hostname and time stamp) Hope that helps and thank you @deenthebean1337 for helping commenting!
@mubarakharuna6425 3 ай бұрын
Time saver, thanks for the content I e bothering to go the long way. The magic of -a was great
@unreal-labs 3 ай бұрын
Glad to help!
@sayyes11 4 ай бұрын
sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt
@BrentLeVasseur 5 ай бұрын
Actually I think its pronounced “Wasaa” and not “Wasoo”. lol
@unreal-labs 3 ай бұрын
Thanks for the comment and correction!
@GouravChouhan-ws2sh 6 ай бұрын
in config.yml , im giving public ips of the servers that i have and it is saying error the ip is public, how to fix this
@unreal-labs 5 ай бұрын
So you’re going to host Wazuh on the internet? I would not recommend that.
@potnurilokeshmanikanta278 6 ай бұрын
are you doing on elastic search or opensearch
@unreal-labs 6 ай бұрын
I have been using opensearch. If you need elastic search I believe you can find install instructions on the Wazuh site
@DeViL-g2q 6 ай бұрын
Sir, my first day at internship and I was asked to configure and install Wazuh all in one bcuz we're small company...you saved me
@unreal-labs 6 ай бұрын
Glad I could help you! Hope your internship goes well!
@ribbusambyal4296 6 ай бұрын
Plz share how to add machine in wazuh server @@unreal-labs
@DeViL-g2q 6 ай бұрын
@@unreal-labs Thank you Unreal, The -a option you did was great genious!! I couldn;t find this in documentation actually all of it! You did with such an easy way out of the box..Thank you. Also, i think we should first change our ip to static so that it remains the same
@charlieblaclock9265 6 ай бұрын
The most important piece missing is the integrated DHCP, AD Sites and Subnets configuration listed in that slide to localize AD traffic for the remote is missing. I'm surprised it wasn't in this video because it's all part of same tasks sequence. Did you have it in a different video?
@unreal-labs 6 ай бұрын
Yeah that series did not turn out. Going to stick with shorter content. Thanks for the comment.
@baronhelmut2701 6 ай бұрын
You know you dont have to copy your last command in right ? You can just type in sudo !! and hit enter. It will repeat the command with prefixed sudo.
@unreal-labs 6 ай бұрын
Thanks for the comment.
@baronhelmut2701 6 ай бұрын
@@unreal-labs enjoyed the tutorial. Made use of wazuh quickly.
@unreal-labs 6 ай бұрын
@@baronhelmut2701 Appreciate the tip and glad you could use the video!
@micah6465 6 ай бұрын
Curious, are you not able to enable ssh? Why would you use telnet?
@unreal-labs 6 ай бұрын
It's just a lab environment. I do use ssh in production. Thanks for the question!!
@buttermilk_pie 7 ай бұрын
are you running hyper v on a powerful workstation or on a win server?
@unreal-labs 7 ай бұрын
I am running Hyper-V server, CPU i9 and 64Gigs of ram. It's just a workstation with Windows 2022 installed.
@robinsondurai 7 ай бұрын
Hi , Great Video . I just followed similar steps you have not provided. 10:10 it will more helpful.
@unreal-labs 7 ай бұрын
Glad it helped
@Browen8 7 ай бұрын
Hugely beneficial thank you, sir!
@unreal-labs 7 ай бұрын
Very welcome!
@jaziyasj2109 8 ай бұрын
hey Thankyou so much. Helped me alot. I want to use this now from other machines. installed in localhost ubuntu. what should I do? Because I need to integrate with another tool.
@unreal-labs 7 ай бұрын
Not sure I understand, but you should be able to ssh into the box or use the Wazuh interface. What other tool are you wanting to integrate?
@itachiotsusuki4388 8 ай бұрын
pls integrate elastic search to wazuh
@unreal-labs 7 ай бұрын
I will be focusing on more Wazuh videos moving forward.
@austinr_90 8 ай бұрын
Thank you bro, you're a G. You did a better explanation than my professor lol
@unreal-labs 7 ай бұрын
You're very welcome!
@thebuttonpushers 8 ай бұрын
You made this look so easy! Thanks for sharing your step by step process, it pointed me in the right direction.
@unreal-labs 8 ай бұрын
Glad it helped!
@QuangMinhLe-tu6yz 8 ай бұрын
i did restart and refresh endless time and it just doesnt work, can anyone tell me how to fix it pls
@unreal-labs 8 ай бұрын
Are you running a firewall on your linux machine? You might check if UFW is running. run "sudo ufw status" to check if the firewall is enabled and "sudo ufw disable" to turn it off.
@QuangMinhLe-tu6yz 8 ай бұрын
@@unreal-labs I checked and it showed inactive. I just dont know why i cant add agent on my server. I do follow every instruction, but my authen key just doesnt show up. Could you help me with this pls
@AashutoshRC 9 ай бұрын
Any way to download the SCA report in pdf format rather than xls?
@unreal-labs 9 ай бұрын
I am not sure, let me do some research. Still not finding a good way to get the report into a pdf format. Maybe creating a custom report. Not ideal.
@sync_arts 9 ай бұрын
If I want to configure these emails using gmail, how can I do that? as simply adding the to and from does not work, can u please make a video on this?
@unreal-labs 9 ай бұрын
Wazuh email alerts do not support SMTP servers with authentication such as Gmail. You will need to setup a server relay, like Postfix to send these emails. I have linked to a Wazuh documentation page. documentation.wazuh.com/current/user-manual/manager/manual-email-report/smtp-authentication.html I use a local Postfix instance to send alerts, at other places I have used IIS SMTP to forward alerts to Office365 or Gmail. Thanks for the comment!
@sync_arts 9 ай бұрын
@@unreal-labs Thanks a ton!!
@TismoGaming 3 ай бұрын
I can’t figure out how to get to that security events page on my instance. I have the latest wazuh 4.8.2 installed but I don’t see that page anywhere
@timosmand9386 9 ай бұрын
You saved me! Much blessings
@unreal-labs 9 ай бұрын
Glad you liked the video!
@zachcyber7350 9 ай бұрын
Awesome stuff so helpful
@unreal-labs 9 ай бұрын
Glad it was helpful!
@brendanbass5495 9 ай бұрын
These instructional videos are great!
@unreal-labs 9 ай бұрын
Glad you like them!
@AsuraSKIes 10 ай бұрын
Thank you very much! For some reason official installation guide doesn't include config.yml file for some reason. I was able to install the tool thanks to your explanation!
@unreal-labs 10 ай бұрын
The config.yml file should be in the wazuh-install-files.tar that was downloaded, but glad you got around it. Thanks for the comment!
@syburcon 10 ай бұрын
Great videos. Do you have a video that shows how to configure SSO for Wazuh. I use DUO and I cant find anything on it. Also, creating groups and using the agent.conf would be great. Thanks, and keep up the great videos.
@unreal-labs 10 ай бұрын
Those are great ideas for new content. Let me see what I can get done. Thanks for the comment and suggestions.
@taigagaming3462 11 ай бұрын
i got stuck at the "An external process is using APT. This process has to end to proceed with the Wazuh installation. Next retry in 30 seconds (1/10) "
@unreal-labs 10 ай бұрын
I have seen this when the gui package update manager is running. You might run all the missing updates for your distro and try again.
@dmzik4691 11 ай бұрын
you are the best ty
@unreal-labs 11 ай бұрын
You are welcome, glad to help!
@bentojgaard5434 11 ай бұрын
That rack you have in your livingroom …… the WAF must be minus 5000 😀
@unreal-labs 11 ай бұрын
Sure nice to have in the winter! Helps warm the office up.
@ARPAN11BHARDWAJ 11 ай бұрын
tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt
@hey6846 Жыл бұрын
Do you know if there's a way to "upload" configuration files to a switch? So if I have a text file with the running-configurations from another switch and I just basically want to paste it onto a new switch... is there an efficient way to do that?
@unreal-labs Жыл бұрын
Yes, you can load another running-config or startup-config into a new switch either by TFTP, FTP, or SCP. You might need to change some interface names if those do not match on the new switch. You will also want to verify that your new switch still supports older commands. Another great video idea! You can also just past the config in from a text file, but I do prefer coping it via TFTP or FTP.
@hey6846 Жыл бұрын
Your videos are great! Subbed! I'd love to see a video of you explaining troubleshooting skills for seeing where packets drop and why! Also an explanation on that 'sh int g0/1' command that has a ton of information.
@unreal-labs Жыл бұрын
Thanks for the comment! That's a good idea for some more videos!
@andymok7945 Жыл бұрын
Thanks for the video. I installed 4.6 and now 4.7 has been released. I updated the server and now using the cli to update the agents.
@unreal-labs Жыл бұрын
Nice job Andy
@marchalthomas6591 Жыл бұрын
Hi, quick noob question. Can we either run an agent on the machine that host the server? Or monitor the machine that the server is installed on without an agent?
@unreal-labs Жыл бұрын
Thanks for the question, the Wazuh server does not need an agent. You in need an agent in servers or computers you want to monitor. There is agentless monitoring if you need that also.
@chahiramaoua4944 Жыл бұрын
Hello, please, I need help. After installing Wazuh indexer and Wazuh dashboard, I encountered an error when trying to connect to the dashboard. The error message reads: 'Wazuh dashboard server is not ready yet.' There is connectivity between the machine, and both the indexer and dashboard show an active status. Can you please assist me?
@unreal-labs Жыл бұрын
Thanks for the comment. I have experienced this issue also, you might try looking over this article on Reddit. www.reddit.com/r/Wazuh/comments/17nlhed/wazuh_dashboard_server_is_not_ready_yet_resolved/ I have also experienced the same issue running Wazuh on Ubuntu and updating the OS fixed my issue. Running the below command will update/upgrade your Ubuntu install, please use caution. "sudo apt update && sudo apt upgrade -y" Let me know if this helps...
@chahiramaoua4944 Жыл бұрын
Hello, thank you for your response, but that didn't help me. :( @@unreal-labs
@sabireyvazli 11 ай бұрын
Hi, I think you don't have wazuh-manager. It is the problem. Indexer and dashboard without wazuh-mamager is kind of useless.
@gorsama-2190 Жыл бұрын
Fantastic video, but it would be clearer if you showed the diagram and the planning before implementing it. It would be easier to grasp the concept, but overall, it was fantastic, thanks.
@unreal-labs Жыл бұрын
I agree a diagram would have made the content clearer. Thanks!
@stantonhoberg224 Жыл бұрын
Promo SM 😘
@unreal-labs Жыл бұрын
Thanks for you comment......
@victorrosa2879 Жыл бұрын
Thanks, your tutorial was more straight forward than their documentation.
@unreal-labs Жыл бұрын
Glad you found the video helpful!
@victorrosa2879 Жыл бұрын
@@unreal-labs Question. I am finding that I can't reach the wazuh server from a different endpoint. They live in the same network. How can I start troubleshooting this issue? So far I have not found any information regarding this issue.
@unreal-labs Жыл бұрын
@@victorrosa2879 Can your endpoint Ping your Wazuh server? I would also check your Default Gateways are correct on the Wazuh server and the endpoint. I always like to start with basic communication troubleshooting and then move on up the OSI model. You might also have a firewall active if you are using Linux for the OS on the Wazuh server. You can disable it using this command. sudo ufw disable. Hope this helps.
@victorrosa2879 Жыл бұрын
@@unreal-labs Yes I can ping both, the server and the end point. As far as the gateway, they both belong to the same subnet but also for the server I have a reservation for it's IP. I also deactivate the FW in both Linux server Cent'OS (aka Rocky 8) and my windows device. Still was not able to reach the dashboard. Could SE linux be the culprit?
@victorrosa2879 Жыл бұрын
@@unreal-labs Yes, is a firewalld and SELINUX issue. Discovered by disabling both services in the server side only. What rules should I place to allow the correct comunication?
@ashasharma-ps9qh Жыл бұрын
Thank it helped me a lot😊
@unreal-labs Жыл бұрын
Glad it helped!
@eshiofunehsanni6047 Жыл бұрын
Hello, your videos are quite educational. I would love to get a mentor through the networking process completely all the way to security. Please let me know if you'd be open
@unreal-labs Жыл бұрын
Glad you found my channel, I would be happy to help on your journey! Please feel free to ask questions if I can answer them I would be happy too!
@quikmcw Жыл бұрын
Will you do some videos with Wazuh and customized Reports, Alerting and Dashboards with the clustering and tenants ?
@unreal-labs Жыл бұрын
Thanks for comment, I will put those on the list. I have not done a Wazuh cluster, so that should be fun to build out.
@mohamedadel-tw8sf Жыл бұрын
hello thx for your efforts what will be a real world situation where i must block traffic from a pc to other pc
@unreal-labs Жыл бұрын
In my experience, I've encountered various situations. At times, I've faced audit requirements. In other instances, I've dealt with infected PCs that couldn't be shut down or cleaned up immediately due to the need to maintain a crucial process or service. Sometimes, my task was simply to block PC-to-PC traffic over an IPsec tunnel. Regardless of the situation, I always prioritize running with the least privilege when setting up communications.
@mohamedadel-tw8sf Жыл бұрын
@@unreal-labs i have started my ccna journy in September from youtube Turtiols and the one thing i struggle with is what would be a real-world scenario to implaint things like why would some use RIP protocol over OSPF even thought RIP has alot of disadvantages
@unreal-labs Жыл бұрын
@@mohamedadel-tw8sf I would pick RIPv2 when I need just a simple and fast routing protocol in a small network. OSPF is definitely more complex. RIP is also kept around for legacy systems. Glad you're making your CCNA happen!
@James-xg4jr Жыл бұрын
awesome will try this out
@unreal-labs Жыл бұрын
Great, have fun!
@santiago.bassett Жыл бұрын
thanks for the Wazuh video ❤
@unreal-labs Жыл бұрын
Sure thing!
@EpicFlightViews Жыл бұрын
Great content here on Wazuh. Subscribed!
@unreal-labs Жыл бұрын
Much appreciated!