Wazuh

Overview
Wazuh on OneCloudPlanet — your own security monitoring center: agents collect events, Wazuh correlates them, catching intrusions and suspicious file changes — all on your infrastructure, no logs shipped to third parties.

What is Wazuh?
The leading open source SIEM/XDR platform: log analysis, intrusion detection (HIDS), file integrity monitoring, vulnerability detection, ready dashboards and alerts. Agents for Linux/Windows/macOS.

Why on OneCloudPlanet?
Security logs stay inside your perimeter — critical for sensitive projects (defense tech, finance).
Recommended configuration: from 4 vCPU / 8 GB. See pricing.
No per-agent fees: monitor any number of servers.
Audit argument: centralized log management is a standard requirement of security questionnaires and ISO processes.

How to launch
1) Sign in at console.ocplanet.cloud
2) Open Marketplace and choose Wazuh
3) Pick a configuration and location
4) Wait for deploy
5) Change the default credentials

Post-deploy checklist
• Change admin component passwords
• Deploy agents to servers (one command per host)
• Enable FIM and vulnerability detection modules
• Alerts to email/Slack and index retention sized to disk

FAQ
How many servers? ~50 agents comfortably on 4 vCPU / 8 GB; scale up beyond.
Wazuh or Zabbix? Zabbix monitors performance; Wazuh monitors security. Together they cover both (both in Marketplace).