Daemons
| Daemons | Descriptions | Supported installations | 
|---|---|---|
| Client side daemon that communicates with the server. | agent | |
| Runs integrity checking on systems where no agent is installed | manager | |
| Receives log messages and compares them to the rules | manager | |
| Adds agents to the Wazuh manager | manager | |
| Forwards Wazuh alerts via syslog | manager | |
| Inserts alert logs into a database | manager | |
| Executes active responses | manager, agent | |
| Monitors configured files and commands for new log messages | manager, agent | |
| Sends Wazuh alerts via email | manager | |
| Monitors agent connectivity and compresses log files | manager | |
| Communicates with agents | manager | |
| Creates reports from Wazuh alerts | manager | |
| Checks configured files for security changes | manager, agent | |
| Manages the Wazuh cluster manager | manager | |
| Manages the Wazuh modules | manager, agent | |
| Manages the Wazuh database | manager | |
| Allows Wazuh to connect to external APIs and alerting tools | manager |