| Port details |
- wazuh-manager Security tool to monitor and check logs and intrusions (manager)
- 4.10.1 security
 =2      4.9.2_1Version of this port present on the latest quarterly branch. - Maintainer: acm@FreeBSD.org
- Port Added: 2022-07-31 20:21:05
- Last Update: 2025-01-19 09:38:59
- Commit Hash: 397e095
- People watching this port, also watch:: jdictionary, py311-Automat, py311-python-gdsii, py39-PyOpenGL, p5-Sane
- License: GPLv2
- WWW:
- https://wazuh.com/
- Description:
- Wazuh is a free and open source platform used for threat prevention, detection,
and response. It is capable of protecting workloads across on-premises,
virtualized, containerized, and cloud-based environments.
Wazuh solution consists of an endpoint security agent, deployed to the
monitored systems, and a management server, which collects and analyzes data
gathered by the agents. Besides, Wazuh has been fully integrated with the
Elastic Stack, providing a search engine and data visualization tool that
allows users to navigate through their security alerts.
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- wazuh-manager>0:security/wazuh-manager
- Conflicts:
- CONFLICTS:
- To install the port:
- cd /usr/ports/security/wazuh-manager/ && make install clean
- To add the package, run one of these commands:
- pkg install security/wazuh-manager
- pkg install wazuh-manager
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: wazuh-manager
- Flavors: there is no flavor information for this port.
- ONLY_FOR_ARCHS: aarch64 amd64
- distinfo:
- TIMESTAMP = 1737146734
SHA256 (wazuh-4.10.1/audit-userspace.tar.gz) = e82a32e5edf93b055160e14bc97f41dead39287925851dc80a7638e2d4d30434
SIZE (wazuh-4.10.1/audit-userspace.tar.gz) = 1682820
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- cmake : devel/cmake-core
- autoconf>=2.71 : devel/autoconf
- bash>0 : shells/bash
- gmake>=4.4.1 : devel/gmake
- python3.11 : lang/python311
- perl5>=5.36<5.37 : lang/perl5.36
- Test dependencies:
-
- python3.11 : lang/python311
- Runtime dependencies:
-
- bash>0 : shells/bash
- python3.11 : lang/python311
- perl5>=5.36<5.37 : lang/perl5.36
- Library dependencies:
-
- libcurl.so : ftp/curl
- libgdbm.so : databases/gdbm
- libnghttp2.so : www/libnghttp2
- libffi.so : devel/libffi
- libarrow.so : databases/arrow
- libepoll-shim.so : devel/libepoll-shim
- libreadline.so.8 : devel/readline
- libsqlite3.so : databases/sqlite3
- This port is required by:
- for Run
-
- security/wazuh-server
Configuration Options:- ===> The following configuration options are available for wazuh-manager-4.10.1:
INOTIFY=off: Kevent based real time monitoring
PRELUDE=off: Sensor support from Prelude SIEM
ZEROMQ=off: ZeroMQ support
====> Options available for the group DATABASE
MYSQL=off: MySQL database support
PGSQL=off: PostgreSQL database support
===> Use 'make config' to modify these settings
- Options name:
- security_wazuh-manager
- USES:
- cpe gmake perl5 python:3.11 readline shebangfix sqlite:3 uidfix
- pkg-message:
- For install:
- Wazuh Manager was installed
1) Copy /etc/locatime to /var/ossec/etc directory
# cp /etc/localtime /var/ossec/etc
2) You must edit /var/ossec/etc/ossec.conf.sample for your setup and rename/copy
it to ossec.conf.
Take a look wazuh manager configuration at the following url:
https://documentation.wazuh.com/current/user-manual/manager/index.html
3) Move /var/ossec/etc/client.keys.sample to /var/ossec/etc/client.keys. This
file is used to store all agents credentials connected to wazuh-manager
# mv /var/ossec/etc/client.keys.sample /var/ossec/etc/client.keys
4) You can find additional useful files installed at
# /var/ossec/packages_files/manager_installation_scripts
5) Do not forget generate auth certificate
# openssl req -x509 -batch -nodes -days 365 -newkey rsa:2048 \
-subj "/C=US/ST=California/CN=Wazuh/" \
-keyout /var/ossec/etc/sslmanager.key -out /var/ossec/etc/sslmanager.cert
# chmod 640 /var/ossec/etc/sslmanager.key
# chmod 640 /var/ossec/etc/sslmanager.cert
6) FreeBSD rules, decoders and SCA files are installed by default. For more
information about updates take a look at:
https://github.com/alonsobsd/wazuh-freebsd
Decoders and rules are used for extract some /var/log/userlog and
/var/log/messages entries from FreeBSD agents. It is necessary add a localfile
entry to /var/ossec/etc/ossec.conf
<localfile>
<log_format>syslog</log_format>
<location>/var/log/userlog</location>
</localfile>
7) Add Wazuh manager to /etc/rc.conf
# sysrc wazuh_manager_enable="YES"
or
# service wazuh-manager enable
8) Start Wazuh manager
# service wazuh-manager start
9) Enjoy it ;)
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
4.10.1
19 Jan 2025 09:38:59
 |
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.10.1
- Update bundle python to 3.11.11
- Update opensearch dependency to 2.16.x
- Update opensearch-dashboards dependency to 2.16.x
ChangeLog
at: https://documentation.wazuh.com/current/release-notes/release-4-10-1.html |
4.9.2_1
20 Dec 2024 04:21:56
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Fix build on aarch64
Reported by: pkg-fallout |
4.9.2_1
16 Dec 2024 01:52:24
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Fix pkg-plist
- Remove *.bak, *.orig, and tmp files installed from some whl files
- Fix issues with pkg-plist file
- Improve Makefile file
- Bump PORTREVISION
Reported by: pkg-fallout |
4.9.2
14 Dec 2024 00:32:29
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Fix fetch on some FreeBSD versions |
4.9.2
07 Dec 2024 19:10:41
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Fix fetch on 13.x-amd64 |
4.9.2
03 Dec 2024 01:49:45
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.9.2
- wazuh-manager: Remove support for freebsd13-aarch64
- wazuh-manager: Cache files were generated from python3.11 instead of
python3.10
- wazuh-manager: Remove obsolete patch files
- wazuh-dashboards : Use opensearch-dashboards230 instead of
opensearch-dashboards210
ChangeLog at: https://github.com/wazuh/wazuh/releases
https://github.com/wazuh/wazuh-dashboard-plugins/releases
PR: 282160
Reported by: Ian Dickens <ian at south-border.com> |
4.7.5
15 Jun 2024 17:38:13
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.7.5
- Fix build/installation on aarch64
- Fix runtime issues on 14.x and 15.x because of openssl3 support [1]
PR: 279363
Reported by: girgen [1] |
4.7.4
24 May 2024 06:51:24
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Fix fetch on 13.x-aarch64 |
4.7.4
11 May 2024 01:51:29
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.7.4
- Fix wazuh-agent segment fault (agent and manager) [1]
- Improve configuration files (agent and manager)
- Update py-pyarrow into cache file to 15.0.2 (manager)
- Update cache files used by wazuh-manager.
- Other minor modifications
ChangeLog
at: https://documentation.wazuh.com/current/release-notes/release-4-7-4.html
Obtained from: https://github.com/wazuh/wazuh/issues/23154 [1] |
4.7.3
23 Mar 2024 22:22:45
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.7.3
ChangeLog
at: https://documentation.wazuh.com/current/release-notes/release-4-7-3.html |
4.7.2
16 Jan 2024 04:57:46
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.7.2
- Install FreeBSD rules, decoders and SCA files by default
- Strip python binary and so files
- Add devel/libffi and databases/arrow to LIB_DEPENDS
- Update pkg-message files
- Othe minor modifications
ChangeLog
at: https://documentation.wazuh.com/current/release-notes/release-4-7-2.html |
4.7.1_1
07 Jan 2024 23:18:00
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Revert partially latest commit
- Latest commit break wazuh-manager on extract
Reported by: pkg-fallout
Differential Revision: <https://reviews.freebsd.org/D42068> |
4.7.1_1
31 Dec 2023 00:37:05
|
Muhammad Moinur Rahman (bofh) |
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree
- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
Also move conditional flags for non sparc64/arm ARCH to fixed flags.
Reviewed by: brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068 |
4.7.1_1
27 Dec 2023 00:19:12
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Fix pkg-plist
- Bump PORTREVISION. wazuh cache for 13-amd64 was repacked
Reported by: pkg-fallout |
4.7.1
22 Dec 2023 17:57:24
|
Jose Alonso Cardenas Marquez (acm) |
securty/wazuh-*: Update to 4.7.1
- Remove support for 12.x (EoL)
- Change some config files to sample files
- Fix syscollector issue when network port is equal to *
ChangeLog
at: https://documentation.wazuh.com/current/release-notes/release-4-7-1.html |
4.7.0
16 Dec 2023 21:36:43
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh: Update to 4.7.0
- Fix ssl=openssl build [1]
- Fix permissions of backup/db directory. Now backup are generated without
problems
- Add support for get ports info
- Add support for get processes info
- Add a better way for get memory info
- Add new decoders and rules files (https://github.com/alonsobsd/wazuh-freebsd)
- Update FreeBSD sca files (https://github.com/alonsobsd/wazuh-freebsd)
- Minor changes to SysInfo::getPackages function
- Another minor modifications
PR: 275008
Reported by: franco _at_ opnsense.org [1] |
4.6.0
03 Nov 2023 18:47:31
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.6.0
- security/wazuh-manager: Deactivate CIS files. The are renamed to
yml.deprecated
- security/wazuh-agent: Don't install all CIS files
- Turn security.keys a sample file. It helps to avoid remove client.keys on
update
- Update pkg-message.in files
- Another minor modifications |
4.5.4
23 Oct 2023 23:02:07
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.5.4
ChangeLog
at: https://documentation.wazuh.com/current/release-notes/release-4-5-4.html |
4.5.3
19 Oct 2023 22:21:22
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.5.3
- security/wazuh-agent: Enable INOTIFY option by default. It enables Kevent
based real time monitoring. See some examples like use it at:
https://wazuh.com/blog/detecting-common-linux-persistence-techniques-with-wazuh/
- security/wazuh-manager: Add entries to pkg-message.in about FreeBSD SCA files
and FreeBSD decoders and rules files. I'll maintain update versions of these
files at https://github.com/alonsobsd/wazuh-freebsd
- security/wazuh-dashboard: Update project url to new one
- Othe minor modifications |
4.5.2
03 Oct 2023 05:27:34
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: update to 4.5.2
- wazuh-indexer and wazuh-dashboards now use 2.10.0 version of opensearch and
opensearch-dashboard
ChangeLog
at: https://documentation.wazuh.com/current/release-notes/release-4-5-2.html |
4.5.0
18 Aug 2023 05:25:50
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.5.0
- wazuh-indexer and wazuh-dashboards now use 2.9.0 version of opensearch and
opensearch-dashboard
- Revert beats dependency to beats7 (filebeat) at security/wazuh-server. beats8
has some issues with filebeat (Take a look at PR/272701) |
4.4.4
21 Jun 2023 19:19:06
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.4.4
- Add python path files from lang/python39/files
- wazuh-indexer and wazuh-dashboards now use 2.8.0 version of opensearch and
opensearch-dashboard
- Update beats dependency to beats8 (filebeat) at security/wazuh-server |
4.4.3
30 May 2023 04:24:56
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.4.3
- Mark IGNORE on FreeBSD 12-aarch64
- Use makepatch to generate patch files
- Fix typo at wazuh-agent and wazuh-manager pkg-message files [1]
- Fix some linking issues when devel/libsysinfo is installed (using ports).
wazuh-manager compile/install a library with the same name like libsysinfo and
it is used by syscollector feature.
- wazuh-dashboard use opensearch-dashboards 2.7.0
- Some other modifications
ChangeLog at: https://github.com/wazuh/wazuh/releases
PR: 271376
Reported by: lambert _ at _ sanesecurityguy.com [1] |
4.4.1
18 Apr 2023 14:35:19
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Fix pkg-plist file
Reported by: pkg-fallout |
4.4.1
17 Apr 2023 23:51:44
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: update to 4.4.1
ChangeLog at: https://github.com/wazuh/wazuh/releases/tag/v4.4.1 |
4.4.0_1
04 Apr 2023 14:11:32
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Fix issue on aarch64
- Bump PORTREVISION
Reported by: pkg-fallout |
4.4.0
31 Mar 2023 03:30:20
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.4.0
- security/wazuh-manager: Add support for aarch64
ChangeLog at: https://github.com/wazuh/wazuh/releases/tag/v4.4.0 |
4.3.10
18 Nov 2022 03:39:27
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: Update to 4.3.10
ChangeLog at: https://github.com/wazuh/wazuh/releases/tag/v4.3.10 |
4.3.9
30 Oct 2022 21:37:32
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: update to 4.3.9
ChangeLog at: https://github.com/wazuh/wazuh/releases/tag/v4.3.9 |
4.3.8_1
04 Oct 2022 04:32:18
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Fix fetch on FreeBSD 13.x and 14.x
Reported by: pkg-fallout |
4.3.8
24 Sep 2022 09:43:26
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: update to 4.3.8
ChangeLog
at: https://documentation.wazuh.com/current/release-notes/release-4-3-8.html |
4.3.7
09 Sep 2022 20:32:24
|
Daniel Engberg (diizzy) |
*/*: Update path set in BUILD_DEPENDS for CMake
Commit b23ea4e2d2f51b53d8915fe9fd7b4efbdd575e38 changed its location to
devel/cmake-core
Approved by: portmgr (blanket) |
07 Sep 2022 21:58:51
|
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
4.3.7
07 Sep 2022 21:10:59
|
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above  ) |
4.3.7
07 Sep 2022 10:26:41
|
Tobias C. Berner (tcberner) |
cleanup: remove trailing whitepaces |
4.3.7
26 Aug 2022 04:07:04
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-*: update to 4.3.7
- Add better way to install python wheels. It could fix issues when fbsd is
updated to security patch or minor release
ChangeLog at: https://github.com/wazuh/wazuh/releases/tag/v4.3.7 |
4.3.6_2
09 Aug 2022 22:49:25
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Fix build
- Fix build on 14-CURRENT
- It works only on amd64. It could works on i386 but I prefer don't expend time
on it because i386 passed to tier 2 on 13.x. aarch64 could be a good platform
for it. I'll try looking on it later
- Bump PORTREVISION
Reported by: pkg-fallout |
4.3.6_1
04 Aug 2022 00:40:32
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: Make pkg-fallout happier
- Change OSVERSION for 13.x support
- Bump PORTREVISION |
4.3.6
31 Jul 2022 20:20:14
|
Jose Alonso Cardenas Marquez (acm) |
security/wazuh-manager: New port: Security tool to monitor and check logs and
intrusions (server)
Wazuh is a free and open source platform used for threat prevention, detection,
and response. It is capable of protecting workloads across on-premises,
virtualized, containerized, and cloud-based environments.
Wazuh solution consists of an endpoint security agent, deployed to the
monitored systems, and a management server, which collects and analyzes data
gathered by the agents. Besides, Wazuh has been fully integrated with the
Elastic Stack, providing a search engine and data visualization tool that
allows users to navigate through their security alerts.
WWW: https://wazuh.com/ |
As an Amazon Associate I earn from qualifying purchases.