Installation guide
Install Wazuh by following the installation workflow that best suits your needs. To learn more about each component and its capabilities, check the Components section.
Wazuh server installation
There are two different options for deploying Wazuh:
All-in-one: The Wazuh server and Elastic Stack are installed on the same host. With this deployment option, you can install Wazuh directly on your system or download our ready-to-use OVA.
Distributed: Each component is installed on a separate host as a single-node or multi-node cluster. This type of deployment provides high availability and scalability of the product, and it is convenient for large working environments.
All-in-one deployment
Distributed deployment
Alternatively, Wazuh can also be installed with commercial options like Elastic Stack basic license or Splunk. To learn more about these options and other installation alternatives, see the More installation alternatives section.
Note
Wazuh also offers the Wazuh Cloud, where all components are hosted on our PCI-DSS and SOC 2 certified SaaS solution and maintained by our team. With the Wazuh cloud, no dedicated hardware is required and everything is ready to use. This service offers a highly flexible infrastructure to match your enterprise needs.
Wazuh agent installation
The Wazuh agent is a single, light-weight monitoring software that runs on most operating systems and provides visibility into the endpoint's security by collecting critical system and application records, inventory data, and detecting potential anomalies. If the Wazuh server and its components are already installed on your environment, select your operating system and follow the installation steps to deploy the agent to the endpoints:
Requirements
Check the Requirements section for information about supported operating systems and the minimum recommended hardware specifications to guarantee optimum performance.