notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details on branch 2025Q3
wazuh-server Components for analyze the data received from the agents
4.12.0_1 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 4.12.0_1Version of this port present on the latest quarterly branch.
Maintainer: acm@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2025-07-08 04:30:06
Last Update: 2025-07-08 04:26:52
Commit Hash: 01bc036
License: GPLv2
WWW:
https://wazuh.com/
Description:
Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored systems, and a management server, which collects and analyzes data gathered by the agents. Besides, Wazuh has been fully integrated with the Elastic Stack, providing a search engine and data visualization tool that allows users to navigate through their security alerts.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (19 items)
Collapse this list.
  1. /usr/local/share/licenses/wazuh-server-4.12.0_1/catalog.mk
  2. /usr/local/share/licenses/wazuh-server-4.12.0_1/LICENSE
  3. /usr/local/share/licenses/wazuh-server-4.12.0_1/GPLv2
  4. etc/wazuh-server/filebeat.yml
  5. etc/wazuh-server/logstash.conf
  6. etc/wazuh-server/wazuh-template.json
  7. share/beats/filebeat/module/wazuh/_meta/config.yml
  8. share/beats/filebeat/module/wazuh/_meta/docs.asciidoc
  9. share/beats/filebeat/module/wazuh/_meta/fields.yml
  10. share/beats/filebeat/module/wazuh/alerts/config/alerts.yml
  11. share/beats/filebeat/module/wazuh/alerts/ingest/pipeline.json
  12. share/beats/filebeat/module/wazuh/alerts/manifest.yml
  13. share/beats/filebeat/module/wazuh/archives/config/archives.yml
  14. share/beats/filebeat/module/wazuh/archives/ingest/pipeline.json
  15. share/beats/filebeat/module/wazuh/archives/manifest.yml
  16. share/beats/filebeat/module/wazuh/module.yml
  17. @owner
  18. @group
  19. @mode
Collapse this list.
Dependency lines:
  • wazuh-server>0:security/wazuh-server
To install the port:
cd /usr/ports/security/wazuh-server/ && make install clean
To add the package, run one of these commands:
  • pkg install security/wazuh-server
  • pkg install wazuh-server
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: wazuh-server
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1746861905 SHA256 (wazuh-4.12.0/filebeat.yml) = bbcf6fe806a32b505b0848386d71684868be85965bfb91b117dff15c9de7c247 SIZE (wazuh-4.12.0/filebeat.yml) = 1120

Expand this list (6 items)

Collapse this list.

SHA256 (wazuh-4.12.0/logstash-wazuh-4.12.0.conf) = 54749bb044b4e8cbaebfe129f01ca253131843fb411c8e917248417c6528fb79 SIZE (wazuh-4.12.0/logstash-wazuh-4.12.0.conf) = 3115 SHA256 (wazuh-4.12.0/wazuh-filebeat-0.4.tar.gz) = d45e78b09627adfcbc1256951f5bd76ecb07600af5021072dbdf299d8bd0e5c7 SIZE (wazuh-4.12.0/wazuh-filebeat-0.4.tar.gz) = 1797 SHA256 (wazuh-4.12.0/wazuh-template.json) = dfd4ba37ef7c32c2e809de929d5c48b8457ba94a05d154ccba39f4ca5ee62b33 SIZE (wazuh-4.12.0/wazuh-template.json) = 84309

Collapse this list.


No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Runtime dependencies:
  1. filebeat : sysutils/beats7
  2. logstash : sysutils/logstash8
  3. wazuh-control : security/wazuh-manager
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for wazuh-server-4.12.0_1: FILEBEAT=on: Install filebeat component LOGSTASH=on: Install logstash component WAZUH-MANAGER=on: Install wazuh manager component ===> Use 'make config' to modify these settings
Options name:
security_wazuh-server
USES:
dos2unix
pkg-message:
For install:
Wazuh server components were installed 1) Wazuh server componenets are based on Wazuh manager and Filebeat projects. This guide help you to adapt wazuh configuration for it works on FreeBSD using apps are part of ports tree. We are using an alternative way to configure wazuh server components on FreeBSD. It is necessary configure logstash between filebeat and opensearch because FreeBSD does not include versions lesser or equal to 7.16.x of Filebeat into ports tree. 2) Do not forget take a look to wazuh-manager post install message to configure the wazuh-server component. # pkg info -D -x wazuh-manager | less 3) Copy /usr/local/etc/wazuh-server/filebeat.yml to /usr/local/etc/beats/ directory 4) Copy /usr/local/etc/wazuh-server/logstash.conf and /usr/local/etc/wazuh-server/wazuh-template.json files to /usr/local/etc/logstash/ directory 5) You can use my own version of wazuh certificates generator for generate root, admin, indexer, server and dashboard certificates used by wazuh components. https://people.freebsd.org/~acm/ports/wazuh/wazuh-gen-certs.tar.gz 6) Edit filebeat.yml and logstash.yml files and changes options accord to your setup. For example host, ssl, filter, etc. Sample files can give you a good guide about that. 7) Install logstash-output-opensearch plugin # cd /usr/local/logstash/bin # sh -c "JAVA_HOME=/usr/local/openjdk11 ./logstash-plugin install logstash-output-opensearch" 8) Check if logstash-output-opensearch plugin was installed # sh -c "JAVA_HOME=/usr/local/openjdk11 ./logstash-plugin list | grep logstash-output-opensearch" 9) Add Filebeat and Logstash to /etc/rc.conf # sysrc filebeat_enable="YES" # sysrc logstash_enable="YES" 10) Start Filebeat and Logstash services # service filebeat start # service logstash start 11) You can look more useful information at the following link: https://documentation.wazuh.com/current/installation-guide/wazuh-server/step-by-step.html Take on mind wazuh arquitecture on FreeBSD is configurated not similar like you can read at wazuh guide. Some times you could decided configure logstash on another host. If it is your case you must adapt some points in this guide. 12) Enjoy it
Master Sites:
  1. There is no master site for this port.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
4.12.0_1
08 Jul 2025 04:26:52
commit hash: 01bc0363a89504ab5337ca20f103165cd0313a86commit hash: 01bc0363a89504ab5337ca20f103165cd0313a86commit hash: 01bc0363a89504ab5337ca20f103165cd0313a86commit hash: 01bc0363a89504ab5337ca20f103165cd0313a86 files touched by this commit
Jose Alonso Cardenas Marquez (acm) search for other commits by this committer
security/wazuh-server: Fix logstash configuration name

- Bump PORTREVISION

(cherry picked from commit 4a1928b49f05d9d608ad8b00bd38ce549d0d9a9c)

Number of commits found: 1