Wazuh Deployment with Puppet and Chef

If your environment already runs Puppet or Chef, integrate Wazuh into the existing pipeline rather than running ad-hoc installers. Wazuh publishes an official Puppet module and a Chef cookbook.

Puppet, install the module

git clone https://github.com/wazuh/wazuh-puppet.git /etc/puppetlabs/code/environments/production/modules/wazuh

Puppet, agent manifest

class { 'wazuh::agent':
  wazuh_register_endpoint => '10.0.0.5',
  wazuh_reporting_endpoint => '10.0.0.5',
  agent_name => $facts['hostname'],
  agent_group => 'default',
}

Puppet, apply

puppet agent --test

Chef, add the cookbook

knife cookbook site install wazuh-agent

Chef, recipe

node.default['wazuh-agent']['config']['ossec_address'] = '10.0.0.5'
include_recipe 'wazuh-agent::default'

Chef, run

chef-client

Both flows leave behind an enrolled, running Wazuh agent reporting to the configured manager. Re-runs are idempotent. For the manager itself, both repositories also include a server class/recipe for a full automated install.