What are your opinions on this tool to being use it on a home lab? Is it worth it?
You're viewing a single thread.
Wazuh is a neat tool, but it’s really just good old OSSEC bolted into Elasticsearch with some custom plugins and middleware. You can get nearly the same result by just shipping logs from ossec and osquery with a lot less complexity.
Is it easy to use for a new user into self hosting?
Not for a new selfhoster, no. It’s fairly complex and has lots of moving pieces. Start with a simple syslog server before going way into the deep end.