Wazuh Agentless Monitoring for Windows Server

[Kazim Koybasi]

Hello All,

We take an advice from one security superviser that taking logs from windows server with wmi feature would be more useful. However when I look for information about agentless monitoring there are not so much information. Is it sensible to take logs from Windows Server with wmi based solution?

Thanks for reading.

Best Regards,

[Cristóbal López]

Hi Kazim,

The agentless function is designed to collect logs of equipment that cannot be installed with an agent, such as routers or switches. It is similar to collecting logs through syslog.

In the case of a Windows host, the best solution is to install a Wazuh agent, which can extract logs in real time from files or the Event Channel. Furthermore, with Wazuh's MSI installer, you can automate agent deployment and run agents in a single step.

Best regards,
Cristobal Lopez.

[Kazim Koybasi]

Hello Cristóbal,

Thanks for your answer. As I understand It is best solution to use wazuh-agent if It is avaliable for specific platform.

Best regards.