Enroll agents

Agent groups in Wazuh are used to organize and manage agents by grouping them based on specific criteria such as their role, location, or type of system. This allows for centralized management and tailored configuration, enabling users to apply specific rules, policies, and settings to different groups efficiently. New agents in Wazuh are automatically assigned to a default group called "default" if they are not specifically placed in another group. This default group acts as a general category, providing basic monitoring and security configurations for agents until they can be assigned to more appropriate groups based on their specific needs. Check out the Create agents groups section to learn how to create customized groups to suit your environment.

Create agents groups

To manage devices within your environment more efficiently, you can create groups and assign agents to these groups at the point of enrollment.

Follow these steps to create groups on your dashboard:

  1. Log in to the Wazuh dashboard.

  2. Click the upper-left menu icon ☰ and expand Server management then select Endpoint Groups.

  3. Click Add new group on the upper right corner on the Endpoint Groups page.

  4. Specify the group name and click Save new group.

Create agent group

Deploy agent

To start using Wazuh, you need to install a Wazuh agent on your endpoint and enroll it in your environment.

Follow these steps to enroll an agent:

  1. Log into the Wazuh dashboard.

  2. Click the upper-left Wazuh icon and then Agents.

  3. Click Deploy new agent.

  4. Follow the steps described on the Deploy a new agent page.

Note

Wazuh agents use TCP to communicate with your environment.

Enroll an agent

If you have any questions about the Wazuh Cloud, see the Cloud service FAQ.