This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Wazuh 4.14 security monitoring platform with Grafana dashboards. Detect threats, check compliance and watch your endpoints from one place, with unique passwords for every instance.
Wazuh is an open source security platform for threat detection, integrity monitoring, incident response and compliance. Lightweight agents on your servers and laptops send security events to the Wazuh manager, which analyses them and shows alerts in the Wazuh dashboard. This image gives IT and security teams an all-in-one Wazuh server in minutes, with extra Grafana dashboards already connected.
What is included: Wazuh 4.14.7 manager, indexer and dashboard on Ubuntu 24.04 LTS, Grafana with a Wazuh security overview dashboard, and Nginx in front of the Wazuh dashboard on port 80. Security is on by default: no password ships in the image. On first boot every instance sets its own Wazuh admin, Wazuh API and Grafana passwords, and SSH accepts key-based login only.
What you get on top of the free software: a pre-built and tested image that is ready in minutes, a unique security setup for every server, simple scripts for changing passwords, regular image updates, and help by email whenever you need it. Wazuh is open source software licensed under GPL-2.0, and Grafana under AGPL-3.0. Wazuh is a trademark of Wazuh, Inc., and Grafana is a trademark of Grafana Labs. This image is an independent build by ProvenCloud.
Highlights
Ready in minutes: launch the instance, open its public IP and sign in to the Wazuh dashboard. The Wazuh manager, indexer and dashboard and a connected Grafana are already installed.
Secure by default: no shared or default passwords. Every instance sets its own Wazuh, API and Grafana passwords on first boot, and SSH accepts key-based login only.
See and stop threats: intrusion detection, file integrity monitoring, vulnerability detection, log analysis and compliance checks for your servers and laptops.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Wazuh SIEM with Grafana on Ubuntu 24.04 LTS by ProvenCloud [IN]
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You pay by the hour for the EC2 instance type you choose to run this pre-built security image. The dimensions are not feature tiers; they are the same software stack running on different Amazon EC2 instance sizes. Pricing scales with the instance you select, spanning compute, memory, storage, GPU, and specialized instance families. Larger instances carry higher hourly rates, so cost tracks the compute and memory you provision. The software itself is open source and needs no license key. You select one instance type that matches your performance and capacity needs.
Top-of-mind questions for buyers
What exactly am I paying for in the hourly rate, and is the software itself licensed?
The hourly rate covers running the pre-built security image on your chosen EC2 instance type. The software stack is open source under GPL-2.0 and needs no license key. You pay your cloud provider for the compute and storage the instance uses.
Am I charged when the instance is stopped or powered off?
Hourly software charges apply while the instance runs. A fully stopped instance stops accruing hourly software charges. Underlying AWS storage fees for the attached 50 GiB root volume may still apply while the instance exists but is not running.
How do I pick an instance type, and does cost change as my log volume grows?
You select one instance type matching your capacity needs. The seller suggests t3a.xlarge for headroom and m6a.2xlarge among tested sizes. As log and agent volume grow, move to a larger instance; the hourly rate rises with the instance size you run.
www.provencloud.io
Helpful?
Vendor refund policy
Software charges are billed hourly, only while your instance runs. You can stop charges at any time by terminating the instance or cancelling your subscription. Charges already incurred are not refundable.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest stable release on AWS Marketplace.
Wazuh 4.14.7 manager, indexer and dashboard on Ubuntu 24.04 LTS with Grafana and Nginx.
Unique Wazuh, API and Grafana passwords are set for every instance on first boot.
Includes helper scripts in /home/ubuntu/iscripts for changing the login and checking status.
Additional details
Usage instructions
Once the instance is running, enter http://<instance-public-ip> into your browser. Wait about ten minutes the first time while Wazuh starts, then sign in with admin as the username and your instance ID as the password. Type the first letter of the instance ID as a capital I, for example I-0123456789abcdef0, because Wazuh requires an uppercase letter. Grafana is at http://<instance-public-ip>:3000 with the same login. The Wazuh API is at https://<instance-public-ip>:55000. You can also connect over SSH with the username ubuntu and your Amazon key pair.
Required inbound ports: 22 (SSH), 80 (Wazuh dashboard), 3000 (Grafana), 55000 (Wazuh API), and 1514 and 1515 for Wazuh agents. For security, allow ports 22, 3000 and 55000 only from your own IP address, and ports 1514 and 1515 only from the machines you monitor.
Your instance ID is shown in the EC2 console, for example i-0123456789abcdef0. Every instance sets its own passwords on first boot, so no two instances share a password.
Change the login for Wazuh and Grafana at once: connect over SSH and run sudo bash /home/ubuntu/iscripts/change_login.sh, which explains Wazuh's password rules first. README-ProvenCloud.txt in the home folder and wazuh_status.sh in iscripts show the exact login for this instance.
The image serves plain HTTP so it works on a bare IP address. Before using it in production, add your own domain and an SSL certificate, or place it behind a load balancer with HTTPS.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Preconfigured Wazuh SIEM and XDR AMI on Ubuntu 24.04 for AWS. Includes threat detection, log analysis, vulnerability monitoring, file integrity monitoring, and centralized security dashboard for cloud and endpoint monitoring.
Grafana Cloud is a fully managed, composable observability platform that brings together Prometheus metrics, logs, and traces with Grafana visualizations and integrates with 100+ data sources. Prebuilt dashboards help you get started in minutes monitoring your cloud native infrastructure, services, and applications.
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Grafana 13 and Prometheus monitoring server. Collect metrics and build dashboards and alerts in minutes, with unique passwords for every instance.
Single-node Wazuh for testing and labs. Includes Wazuh server, Filebeat, Wazuh dashboard and Wazuh indexer.
Professional support is not included. For dedicated assistance, explore Wazuh SIEM & XDR Professional Support on AWS Marketplace.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.