The Wazuh agent runs on the hosts that you want to monitor.
It is multi-platform and provides the following capabilities:

- Log and data collection
- File integrity monitoring
- Rootkit and malware detection
- Security policy monitoring.
- Configuration assessments
- Software inventory

In addition, it communicates with the Wazuh manager, sending data in near
real-time through an encrypted and authenticated channel.

WWW: https://github.com/wazuh/wazuh