Deploying Wazuh Agents

Every host that needs monitoring must have a Wazuh agent installed to gather logs and forward them to the Wazuh server. To deploy a new agent, navigate through the Wazuh menu at the top left of the screen and select "Agents."

Then, navigate to “Deploy new agent” to start configuring your agent [TO-DO: Obfuscate the information in the screenshot]

To deploy a new agent, you need to specify the Operating System, Wazuh server address, and the name of the agents. Once the agent details are completed, follow the instructions in step 4 to install the Wazuh agent inside your host.

After installing the agent, the count of installed agents will be added, and you can access this agent to view alerts generated according to the rules. When there is no additional configuration, default pre-defined rules from Wazuh will be set automatically.

The log provided here is typical for a web server running PHP. Note that logs can vary with different operating systems, applications, or hardware, and are also influenced by the configurations previously established.