✨Deploy Wazuh Docker in single node configuration✨

This deployment is defined in the docker-compose.yaml file with one Wazuh manager containers, one Wazuh indexer containers, and one Wazuh dashboard container. It can be deployed by following these steps:

Wazuh

Clone the Repository

Download the Wazuh Docker repository for version 4.8.2:

git clone https://github.com/wazuh/wazuh-docker.git -b v4.8.2

Increase max_map_count on your host (Linux). This command must be run with root permissions:

sysctl -w vm.max_map_count=262144

Run the certificate creation script:

generator-indexer-certs-file

cd wazuh-docker/single-node
docker pull wazuh/wazuh-certs-generator:0.0.2
cat generate-indexer-certs.yml #update image mentioned in below NOTE.
docker compose -f generate-indexer-certs.yml run --rm generator
  • Update Image in generate-indexer-certs.yml
  • image: wazuh/wazuh-certs-generator:0.0.2

Start the environment with docker-compose:

running-containers

⏱️ Deployment Time

The environment takes about 1 minute to get up (depending on your Docker host) for the first time since Wazuh Indexer must be started for the first time and the indexes and index patterns must be generated.

✨ Preview of Wazuh Dashboard:✨

running-containers

Destroy compose environment

docker compose down --volumes

© 2025 Jatin Sharma. All rights reserved.