This is the documentation for Wazuh 2.1. Check out the docs for the latest version of Wazuh!

Installing Wazuh agent

The Wazuh agent runs on the hosts that you want to monitor. It is multi-platform and provides the following capabilities: log and data collection, file integrity monitoring, rootkits and malware detection, and security policy monitoring. In addition, it talks to the Wazuh manager, sending data in near real-time through an encrypted and authenticated channel.

There are several options to install a Wazuh agent, depending on the operating system and whether or not you wish to build from source. Consult the table below and choose how to proceed for a given agent:

Type Description
RPM packages Install Wazuh agents on CentOS/RHEL/Fedora.
DEB packages Install Wazuh agents on Debian/Ubuntu.
Windows installer Install Wazuh agents on Windows.
Mac OS installer Install Wazuh agents on Mac OS
Solaris installer Install Wazuh agents on Solaris
Sources Install Wazuh agents from source code.


Deploying agents to a large number of servers or endpoints can be easier using automation tools like Puppet, Chef, SCCM or Ansible. Consider exploring these options if that is your case.