Home / Marketplace / Wazuh All-in-One on Ubuntu 24.04 LTS

Wazuh All-in-One on Ubuntu 24.04 LTS

A complete security information and event management (SIEM) and extended detection and response (XDR) platform in a single VM: Wazuh manager, indexer, and dashboard pre-integrated. Unique per-VM credentials are generated at install — start enrolling agents and detecting threats the same hour you deploy.

Get it on Azure Marketplace Deploy on Azure Support & quick start

Version: Wazuh 4.12 (all-in-one)Platform: Ubuntu 24.04 LTSPorts: 443 (dashboard), 1514/1515 (agent enrollment/events)Category: Security & Identity

Wazuh All-in-One on Ubuntu 24.04 LTS screenshot

What's included

Wazuh 4.12 manager + indexer + dashboard, pre-integrated
File integrity monitoring, vulnerability detection, log analysis
Compliance mappings: PCI DSS, HIPAA, GDPR, CIS
Unique per-VM credential set generated at first boot
Ubuntu 24.04 LTS with automatic security updates
Trusted Launch: Secure Boot + vTPM supported

Quick start

Open https://<VM-IP>/ in your browser (self-signed certificate on first boot).
Sign in as `admin` with the generated password (see command below), then change it immediately.
Deploy Wazuh agents to your fleet from the dashboard's agent-enrollment wizard (ports 1514/1515).

Get your admin password (one time)

ssh <your-username>@<VM-IP>
sudo tar -xzf /root/wazuh-passwords.tar.gz -O

Every image ships without any shared or default password — a unique admin credential is generated for your VM on first boot. Change it after first sign-in.

Common use cases

SIEM for hybrid VM + container fleets
Compliance evidence collection (PCI/HIPAA/CIS)
Endpoint detection with the Wazuh agent
Centralized log analysis and alerting

Why our images

Freshly rebuilt against the latest security advisories, no shared default credentials, Trusted Launch support, and automatic OS security updates — everything runs in your own Azure subscription under your governance.

Need help?

Product support page
support@dcassociatesgroup.com
Contact form