Installation alternatives

You can install Wazuh using other deployment options. These are complementary to the installation methods you can find in the Installation guide and the Quickstart.

Installing the Wazuh central components

All the alternatives include instructions on how to install the Wazuh central components. After these are installed, you then need to deploy agents to your endpoints.

I want to...

Use

Typical time

Try Wazuh on one Linux host

Quickstart

About 5 to 10 minutes

Install on one or more hosts with a script

Assisted installation

About 6 minutes (all-in-one), 15 minutes (3 hosts)

Control every step

Step-by-step installation

About 20 minutes (all-in-one)

Install without internet access

Offline installation

About 20 minutes, plus the download

Import a ready virtual machine

Virtual machine (OVA)

About 15 minutes, plus a 3.8 GB download

Run in containers

Docker, Kubernetes

About 15 minutes (Docker single-node)

Automate with Ansible

Ansible

About 10 minutes (all-in-one)

Ready-to-use machines

  • Virtual machine (VM): Wazuh provides a pre-built virtual machine image (OVA) that you can directly import using VirtualBox or other OVA compatible virtualization systems.

Containers

  • Deployment on Docker: Deploy Wazuh with the official Wazuh Docker images. Using Docker, you can deploy a single-node or multi-node Wazuh stack on one Docker host. A Wazuh agent container is also available.

  • Deployment on Kubernetes: Deploy the Wazuh central components on Amazon EKS or on a local Kubernetes cluster, and deploy Wazuh agents on Kubernetes.

Offline

  • Offline installation guide: Installing the solution offline involves downloading the Wazuh components to later install them on a system with no internet connection.

From sources

  • Installing the Wazuh server from sources: Installing Wazuh from sources means installing the Wazuh manager without using a package manager. You compile the source code and copy the binaries to your computer instead.

Installing the Wazuh agent

The Wazuh agent is a single and lightweight monitoring software. It is a multi-platform component that can be deployed to laptops, desktops, servers, cloud instances, containers, or virtual machines. It provides visibility into the endpoint security by collecting critical system and application records, inventory data, and detecting potential anomalies.

If the Wazuh central components are already installed in your environment, create an enrollment token on the Wazuh manager, as described in Generate the enrollment token. Then select your operating system below and follow the installation steps to deploy the agent on the endpoints.

From sources

  • Installing the Wazuh agent from sources: Installing Wazuh from sources means installing the Wazuh agent without using a package manager. You compile the source code and copy the binaries to your computer instead.

Orchestration tools

These alternatives guide you to install the Wazuh central components.