Clone playbook repository on the control node. Check out a commit tagged as a stable release (see Releases section on GitHub).

To deploy Wazuh in a CCDC scenario, choose playbooks/wazuh-single.yml. Note that version 4.7.2 somehow has an empty certificates directory somewhere and thinks that the certificates were already generated when they’re not (just rmdir it). Also deploy playbooks/wazuh-agent.yml to all the other instances (make sure these instances satisfy prerequisites for Ansible managed nodes, especially Windows).

For Windows boxes, make sure that have WinRM running and .NET 4.0 installed.

Start-Service WinRM -PassThru
Set-Service WinRM -StartupType Automatic -PassThru
# If winget is available, download .NET runtime:
winget install --silent Microsoft.DotNet.Runtime.8
# Otherwise, download .NET 8.0 Runtime (4.0 minimum)