OPTIMALISASI KEAMANAN SIBER PADA SERVER SKANEMA SMK 5 BATAM MELALUI IMPLEMENTASI SIEM WAZUH BERFOKUS FILE INTEGRITY MONITORING DAN VISUALISASI GRAFANA

Abstract

Educational institutions, including vocational schools, increasingly face cyber security threats such as data breaches that endanger sensitive student data, as seen at SMK 5 Batam which runs an examination application (Skanema) on an Ubuntu server yet lacks a structured monitoring system. This study builds a Wazuh-based Security Information and Event Management (SIEM) system integrated with Grafana so the IT team can monitor the server effectively, and designs an easy-to-understand Grafana dashboard as an alternative to the more complex native Wazuh interface. Detection testing focuses on the File Integrity Monitoring (FIM) feature. The research method consists of infrastructure preparation, configuration, testing, and evaluation, using two instruments, namely FIM testing and structured interviews with the IT team. The Wazuh Manager and agent were successfully integrated with the Grafana dashboard that displays real-time alerts, and a Postfix-based email notification server acting as an SMTP relay to Gmail was successfully implemented. FIM testing across four scenarios, namely file modification, addition, deletion, and resource overhead measurement, was successfully detected by the syscheck module with very low overhead (an average memory fluctuation of less than 1 MiB). Interviews with both informants indicated an initial perception that the developed Grafana dashboard is easier to understand than the native Wazuh interface, especially for new users, although this finding is qualitative and limited to two informants in a single context and therefore is not intended to be generalized. These results show that a low-cost SIEM architecture combining Wazuh, Grafana, and email notification is technically feasible, resource-efficient, and suitable for vocational school environments.