Agent without manager?

[Stephen]

Hello, How can I use the wazuh agent without manager? It would be installed on a offline solution with the IPS capabilities. Is that possible? 

Thanks

[Hich]

You can install a wazuh agent on a computer/server or anything you need and configure what logs to send to the manager 

[Stephen]

Hi, I don't need a manager. I would like to run it as a manager-less HIDS just for collecting logs locally. Similar to the "local" install in ossec. 

[Kevin Branch]

Stephen,

If your target system is Linux, you could install the wazuh-manager package directly on that system and it would locally collect logs and analyze them.  The Wazuh manager serves as an agent unto itself.  If you want full HIDS functionality, including the Wazuh Kibana app just for/on that one host, then follow the installation instructions for setting up the Wazuh single-host architecture.  See:

https://documentation.wazuh.com/3.x/installation-guide/installing-wazuh-server/wazuh_server_rpm.html#wazuh-server-rpm  

If your target system is Windows, you will have to have a separate Linux platform running the Wazuh manager since you can only install Wazuh agent on Windows platforms.  The Wazuh agent is useless without a manager to connect to.

Kevin

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/6669d684-e204-4bf2-be33-908066503428%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.