Adding New Agents Using the Wazuh Dashboard – The Simplified Way

Introduction

Wazuh is a powerful open-source security platform that offers real-time threat detection, log analysis, and compliance management. Once you’ve set up the Wazuh server, indexer, and dashboard, the next crucial step is to start monitoring your infrastructure by adding agents. In earlier blogs, we discussed installing the Wazuh Indexer and Server Cluster. Now, let’s look at the easiest way of adding new agents using Wazuh Dashboard without having to manually extract or register keys.

Why Use the Dashboard to Add Agents?

The Wazuh Dashboard allows you to:

• Easily generate a tailored installation command
• Support agent installation across Linux, Windows, and macOS
• Automatically register the agent with the Wazuh Manager
• Save time and avoid manual errors

Step-by-Step Guide for Adding New Agents using Wazuh Dashboard

Access the Wazuh Dashboard

Log in to the dashboard at:

https://<your-dashboard-ip>:443

Tip: Replace <your-dashboard-ip> with your actual dashboard IP or domain name.

Use your admin credentials to access the interface.

(Optional) Create an Agent Group

Grouping agents makes configuration management easier—especially when dealing with different environments like production, development, or OS types.

To create a group:

Navigate to:

Management → Groups

Click “Add group”

Enter a group name like web-servers, linux-nodes, or production

Note: If you skip this step, agents will be automatically assigned to the default group.

Open the Agent Management Panel

go to the section where you can add a new agent:

Navigate to Management → Agents

Click the “Add agent” button located at the top-right

Fill in Agent Details

A form will appear where you’ll need to:

Select the operating system: Linux, Windows, or macOS

Enter the agent name: e.g., web-node-01

(Optional) Assign the agent to a group created earlier

Then click “Generate command”

Copy the Generated Command

The Wazuh Dashboard will now generate a one-liner install command like the following:

curl -sO https://packages.wazuh.com/4.11/wazuh-install.sh && sudo bash wazuh-install.sh --agent \
--manager-ip <manager-ip> --agent-name <agent-name>

This script installs the agent, connects it to the Wazuh Manager, and sets up secure communication.

Replace <manager-ip> and <agent-name> with your actual values.

Run the Command on the Target Machine

Now, SSH into the system you want to monitor and run the copied command:

# ssh user@target-machine
# Then paste the one line installer command

The script will:

Download and install the Wazuh agentb v 

Register the agent with the Wazuh Manager

Begin monitoring immediately (after validation)

Once installed, the new agent will appear in the Wazuh Dashboard under Management → Agents. From here, you can view status, logs, and apply configurations.

Pro Tip: Make sure the agent can reach the Wazuh Manager on the required port (default: TCP 1514 for UDP/TCP communication).

Conclusion

Adding new agents using Wazuh Dashboard is the easiest and most efficient method to expand your monitoring footprint. With a few clicks and a single command, you can deploy agents across your infrastructure and have them reporting in real time. Creating groups in advance is optional but highly beneficial for scalable and structured management.

If you encounter any issues or need expert assistance while adding new agents using the Wazuh Dashboard, don’t hesitate to reach out to our team. At Skynats, our experienced professionals are ready to help you with seamless Wazuh deployment, agent integration, and ongoing monitoring support.