Wazuh linux agent installation steps

Securely add the Wazuh GPG key to your system

curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | gpg --no-default-keyring --keyring gnupg-ring:/usr/share/keyrings/wazuh.gpg --import && chmod 644 /usr/share/keyrings/wazuh.gpg

Add the Wazuh repository to your APT sources

echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main" | tee -a /etc/apt/sources.list.d/wazuh.list

Then perform apt update and install the wazuh agent

sudo apt update

apt-get install wazuh-agent

This will install the Wazuh agent, now navigate to /var/ossec/etc/ directory

Edit the ossec.conf file and replace MANAGER_IP with your Wazuh manager IP for the agent to report to the Wazuh manager.

Enable and start the Wazuh agent service.

sudo systemctl enable wazuh-agent.service

sudo systemctl start wazuh-agent.service