Installing the Wazuh agent on Windows takes under 5 minutes with a single PowerShell command. Download the MSI package from the official Wazuh repository, run the installer with your manager’s IP, and start the Wazuh service — done. Below you’ll find the exact commands for Windows, plus identical step-by-step guides for Linux and macOS.
⚙️ Before You Start: Register the Agent
Before installing on any platform, create a new agent registration in the Wazuh Dashboard. Go to Dashboard → Agents → Deploy New Agent. After selecting your platform, a custom installation command is generated for you.
🪟 How to Install Wazuh Agent on Windows
Open PowerShell as Administrator and run the following commands. Replace your-manager-ip with the IP address of your Wazuh Manager:
Invoke-WebRequest -Uri https://packages.wazuh.com/4.x/windows/wazuh-agent-4.13.0-1.msi -OutFile wazuh-agent.msi
msiexec.exe /i wazuh-agent.msi /q WAZUH_MANAGER="your-manager-ip" WAZUH_REGISTRATION_SERVER="your-manager-ip"
NET START WazuhSvcThat’s it. In under 5 minutes the agent is installed, registered, and actively sending data to your Wazuh Manager. The MSI file is downloaded directly from packages.wazuh.com, the official Wazuh distribution repository — no third-party mirrors.
🐧 How to Install Wazuh Agent on Linux (Ubuntu/Debian)
curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | gpg --no-default-keyring --keyring gnupg-ring:/usr/share/keyrings/wazuh.gpg --import
echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main" | tee /etc/apt/sources.list.d/wazuh.list
apt-get update
apt-get install -y wazuh-agentWAZUH_MANAGER="your-manager-ip" systemctl enable wazuh-agent
systemctl start wazuh-agent🍎 How to Install Wazuh Agent on macOS
curl -so wazuh-agent.pkg https://packages.wazuh.com/4.x/macos/wazuh-agent-4.13.0-1.pkg
launchctl setenv WAZUH_MANAGER "your-manager-ip"
installer -pkg ./wazuh-agent.pkg -target /
/Library/Ossec/bin/wazuh-control start✅ Verify the Installation
Open the Wazuh Dashboard and go to the Agents tab. Your newly installed agent should appear with the status Active. If it doesn’t show up, verify that the agent service is running (NET START WazuhSvc on Windows, systemctl status wazuh-agent on Linux) and that the Manager IP is correct and reachable on port 1514/tcp.
❓ Frequently Asked Questions
How long does it take to install the Wazuh agent on Windows?
Under 5 minutes with a fast internet connection. The MSI download is about 30 MB, the silent install completes in under a minute, and the agent registers with your Wazuh Manager within seconds of the service starting.
Do I need a license to install the Wazuh agent?
No. The Wazuh agent is free and open-source under the GPLv2 license. You can install it on an unlimited number of Windows, Linux, or macOS endpoints without paying any license fees.
What port does the Wazuh agent use?
The Wazuh agent connects to the Manager on TCP port 1514 (agent communication) by default, and uses TCP port 1515 for initial registration with agent-auth. Make sure these ports are open in your firewall between the agent and the Manager.
Can I install the Wazuh agent silently?
Yes. The /q flag in msiexec performs a silent install with no UI. This is the recommended method for mass deployment via Group Policy, Intune, SCCM, or PowerShell scripts across many Windows endpoints.
Does the Wazuh agent work on Windows Server?
Yes. The Wazuh agent supports Windows Server 2012 R2, 2016, 2019, 2022, and 2025, along with Windows 10 and 11. The same MSI installer works across all supported Windows versions.
📚 Related Posts
- 👉 Wazuh + Active Directory Security
- 👉 Writing Custom Wazuh Rules
- 👉 Is Wazuh Really Free? Complete Guide
- 👉 Wazuh + Suricata Integration
💬 Having trouble with the Wazuh agent installation? Tell us which platform you’re stuck on in the comments. You can also reach us via the Contact page.
Leave a Reply