Deploying Wazuh Agents Across macOS, Proxmox and Windows in a Home Lab
· 21:24 · Watch on YouTube ↗
Summary
A home-lab tutorial deploys Wazuh agents on three macOS devices and a Proxmox Linux node, verifies sudo telemetry, troubleshoots a manager-IP configuration error, and describes Windows setup with Sysmon.
Key points
- The video configures Wazuh agents to improve visibility across the creator’s home-lab devices.
- On macOS, the tutorial uses the Wazuh dashboard to generate installation commands and confirms agents connect.
- Running a privileged sudo session generated first-time sudo-user events visible in Wazuh.
- The Proxmox agent initially failed because its manager IP configuration was invalid; correcting the address allowed the service to start and connect.
- The Windows installation and Sysmon setup were not shown because of a screen-recording issue; the speaker describes running the install command as an administrator and starting the service.
- The speaker recommends Sysmon and mentions Olaf Hartong’s modular configurations and an alternative from Swift on Security.