mirror of https://github.com/valitydev/wazuh-docker.git synced 2024-11-06 01:35:18 +00:00

Wazuh - Docker containers

Go to file

Alexey Pronin a4b94ba94b Update index template for ES7 (#6 )		2021-04-30 16:57:44 +03:00
agent	ELK 6.8.x OSS (#1 )	2020-10-30 13:14:09 +03:00
build_utils@ccf618949b	Add o365 script (#2 )	2020-11-18 15:50:17 +03:00
elasticsearch	ELK 6.8.x OSS (#1 )	2020-10-30 13:14:09 +03:00
kibana	Add o365 script (#2 )	2020-11-18 15:50:17 +03:00
nginx	Updating to Wazuh v3.12. Also license year update.	2020-03-20 16:42:36 +01:00
wazuh	Update index template for ES7 (#6 )	2021-04-30 16:57:44 +03:00
.gitignore	ELK 6.8.x OSS (#1 )	2020-10-30 13:14:09 +03:00
.gitmodules	Add o365 script (#2 )	2020-11-18 15:50:17 +03:00
CHANGELOG.md	Bump versions to 3.12.3_7.6.2	2020-04-30 14:44:16 +02:00
docker-compose.yml	ELK 6.8.x OSS (#1 )	2020-10-30 13:14:09 +03:00
Jenkinsfile	Add o365 script (#2 )	2020-11-18 15:50:17 +03:00
LICENSE	Updating to Wazuh v3.12. Also license year update.	2020-03-20 16:42:36 +01:00
README.md	ELK 6.8.x OSS (#1 )	2020-10-30 13:14:09 +03:00
VERSION	Bump versions to 3.12.3_7.6.2	2020-04-30 14:44:16 +02:00

README.md

Wazuh Docker images

In this repository you will find the containers to run:

wazuh: It runs the Wazuh manager, Wazuh API and Filebeat (for integration with Elastic Stack)
wazuh-kibana: Provides a web user interface to browse through alerts data. It includes Wazuh plugin for Kibana, that allows you to visualize agents configuration and status.
wazuh-nginx: Proxies the Kibana container, adding HTTPS (via self-signed SSL certificate) and Basic authentication.
wazuh-elasticsearch: An Elasticsearch container (working as a single-node cluster) using Elastic Stack Docker images. Be aware to increase the vm.max_map_count setting, as it's detailed in the Wazuh documentation.

In addition, a docker-compose file is provided to launch the containers mentioned above.

Elasticsearch cluster. In the Elasticsearch Dockerfile we can visualize variables to configure an Elasticsearch Cluster. These variables are used in the file config_cluster.sh to set them in the elasticsearch.yml configuration file. You can see the meaning of the node variables here and other cluster settings here.

Documentation

Directory structure

wazuh-docker
├── docker-compose.yml
├── kibana
│   ├── config
│   │   ├── entrypoint.sh
│   │   └── kibana.yml
│   └── Dockerfile
├── LICENSE
├── nginx
│   ├── config
│   │   └── entrypoint.sh
│   └── Dockerfile
├── README.md
├── CHANGELOG.md
├── VERSION
├── test.txt
└── wazuh
    ├── config
    │   ├── data_dirs.env
    │   ├── entrypoint.sh
    │   ├── filebeat.runit.service
    │   ├── filebeat.yml
    │   ├── init.bash
    │   ├── postfix.runit.service
    │   ├── wazuh-api.runit.service
    │   └── wazuh.runit.service
    └── Dockerfile

Branches

stable branch on correspond to the latest Wazuh-Docker stable version.
master branch contains the latest code, be aware of possible bugs on this branch.
Wazuh.Version_ElasticStack.Version (for example 3.10.2_7.5.0) branch. This branch contains the current release referenced in Docker Hub. The container images are installed under the current version of this branch.

Credits and Thank you

These Docker containers are based on:

"deviantony" dockerfiles which can be found at https://github.com/deviantony/docker-elk
"xetus-oss" dockerfiles, which can be found at https://github.com/xetus-oss/docker-ossec-server

We thank you them and everyone else who has contributed to this project.

License and copyright

Web references

Wazuh website