Overview
Wazuh is an open source security platform for threat detection, integrity monitoring, incident response and compliance. Lightweight agents on your servers and laptops send security events to the Wazuh manager, which analyses them and shows alerts in the Wazuh dashboard. This image gives IT and security teams an all-in-one Wazuh server in minutes, with extra Grafana dashboards already connected.
What is included: Wazuh 4.14.7 manager, indexer and dashboard on Ubuntu 24.04 LTS, Grafana with a Wazuh security overview dashboard, and Nginx in front of the Wazuh dashboard on port 80. Security is on by default: no password ships in the image. On first boot every instance sets its own Wazuh admin, Wazuh API and Grafana passwords, and SSH accepts key-based login only.
What you get on top of the free software: a pre-built and tested image that is ready in minutes, a unique security setup for every server, simple scripts for changing passwords, regular image updates, and help by email whenever you need it. Wazuh is open source software licensed under GPL-2.0, and Grafana under AGPL-3.0. Wazuh is a trademark of Wazuh, Inc., and Grafana is a trademark of Grafana Labs. This image is an independent build by ProvenCloud.
Highlights
- Ready in minutes: launch the instance, open its public IP and sign in to the Wazuh dashboard. The Wazuh manager, indexer and dashboard and a connected Grafana are already installed.
- Secure by default: no shared or default passwords. Every instance sets its own Wazuh, API and Grafana passwords on first boot, and SSH accepts key-based login only.
- See and stop threats: intrusion detection, file integrity monitoring, vulnerability detection, log analysis and compliance checks for your servers and laptops.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Cost/hour |
|---|---|
t3a.xlarge Recommended | $0.03 |
t2.micro | $0.03 |
t3.micro | $0.03 |
c7a.medium | $0.03 |
c8a.medium | $0.03 |
m1.medium | $0.03 |
m1.small | $0.03 |
m3.medium | $0.03 |
m7a.medium | $0.03 |
m8a.medium | $0.03 |
Vendor refund policy
Software charges are billed hourly, only while your instance runs. You can stop charges at any time by terminating the instance or cancelling your subscription. Charges already incurred are not refundable.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest stable release on AWS Marketplace.
Wazuh 4.14.7 manager, indexer and dashboard on Ubuntu 24.04 LTS with Grafana and Nginx.
Unique Wazuh, API and Grafana passwords are set for every instance on first boot.
Includes helper scripts in /home/ubuntu/iscripts for changing the login and checking status.
Additional details
Usage instructions
Once the instance is running, enter http://<instance-public-ip> into your browser. Wait about ten minutes the first time while Wazuh starts, then sign in with admin as the username and your instance ID as the password. Type the first letter of the instance ID as a capital I, for example I-0123456789abcdef0, because Wazuh requires an uppercase letter. Grafana is at http://<instance-public-ip>:3000 with the same login. The Wazuh API is at https://<instance-public-ip>:55000. You can also connect over SSH with the username ubuntu and your Amazon key pair.
Required inbound ports: 22 (SSH), 80 (Wazuh dashboard), 3000 (Grafana), 55000 (Wazuh API), and 1514 and 1515 for Wazuh agents. For security, allow ports 22, 3000 and 55000 only from your own IP address, and ports 1514 and 1515 only from the machines you monitor.
Your instance ID is shown in the EC2 console, for example i-0123456789abcdef0. Every instance sets its own passwords on first boot, so no two instances share a password.
Change the login for Wazuh and Grafana at once: connect over SSH and run sudo bash /home/ubuntu/iscripts/change_login.sh, which explains Wazuh's password rules first. README-ProvenCloud.txt in the home folder and wazuh_status.sh in iscripts show the exact login for this instance.
The image serves plain HTTP so it works on a bare IP address. Before using it in production, add your own domain and an SSL certificate, or place it behind a load balancer with HTTPS.
Support
Vendor support
Email: support@provencloud.io
Support page: https://www.provencloud.io/support
Hours: Monday to Friday, 10:00 to 19:00 IST (UTC+05:30)
Billing and refunds for this subscription are handled by AWS Marketplace.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.