Category: Monitoring, SIEM & Detection (Wazuh)

A Wazuh agent can appear installed and running while silently failing to deliver logs to the manager. This runbook focuses on end-to-end validation, from agent service state to manager-side ingestion. Symptoms Agent shows as installed but no alerts or logs appear Agent intermittently disconnects Manager UI shows agent as never connected No obvious errors in…