How to Install Wazuh Dashboard

The Wazuh Dashboard is a web-based graphical user interface (GUI) designed to help users visualize, monitor, and manage security events and alerts collected from agents across your infrastructure. Built on top of OpenSearch Dashboards, it offers a simple way to engage with your Wazuh data, making it easier to analyze incidents, monitor threats in real time, and ensure compliance.

In previous blogs, we walked through the installation of the Wazuh Indexer, which stores and indexes collected security data, and the Wazuh Server Cluster, the core component responsible for processing and analyzing data from agents.

In this guide, we’ll focus on installing Wazuh Dashboard — the web interface that allows you to monitor and manage your Wazuh infrastructure in real time, visualize security events, and gain actionable insights.

Please follow the steps below to install and configure the Wazuh Dashboard:

Installing the Wazuh Dashboard

We will use the official Wazuh installation script to keep the deployment simple and consistent with the rest of the Wazuh ecosystem.

Step 1: Download the Wazuh Installation Script

If you’ve already installed the Wazuh Indexer and Server components, you can proceed with downloading the installation script:

Step 2: Run the Installation Script for the Dashboard

Use the command below to install and configure the Wazuh Dashboard. Replace dashboard with your desired node name.

bash wazuh-install.sh --wazuh-dashboard dashboard

The script will install all necessary components, configure communication with the server and indexer, and initialize the web interface.

Step 3: Access the Wazuh Dashboard

Once the installation is complete, you will see a summary in the terminal including the login credentials.

You can now access the dashboard at:

https://<wazuh-dashboard-ip>:443

Default credentials (shown at the end of installation):

For example: 
Username: admin
Password: vX?JU7v4Jszt4rcfmBkldC5K.SUbBieo (or your unique password)

Localhost Tip: Accessing via Hostname

If your Wazuh Dashboard is configured to listen on 0.0.0.0 and you’re accessing it locally (127.0.0.1), you may encounter issues when trying to access it using the public IP address. This can be resolved by adding a local host entry to your system.

To configure a host entry on Windows, follow these steps:

Open the hosts file with a text editor (e.g., Notepad) with administrator privileges.

The file is located at:

C:\Windows\System32\drivers\etc\hosts

Add the following entry to the bottom of the file (replace 65.xx.xxx.xxx with your actual IP address):

65.xx.xxx.xxx    wazuh.local

Then save the file.

Now, try accessing the Wazuh Dashboard using the following URL in your browser:

https://wazuh.local:443

You should now see the Wazuh Dashboard login page. This method simplifies local testing and internal access by using a friendly hostname instead of the IP address.

Conclusion

Installing the Wazuh Dashboard adds a powerful visualization layer to your Wazuh architecture, enabling real-time insights, simplified event correlation, and simplified management. Combined with the previously installed Indexer and Server Cluster, your Wazuh deployment is now fully operational and ready to scale.

Need help with installing Wazuh Dashboard? Contact our support team for expert guidance and seamless setup assistance today.