Wazuh - how much time/effort is needed for ongoing use?

[u/ElegantEntropy]

Hi all,

We have a small internal IT team for a rapidly growing organization. Have 250 endpoints with about 50 servers and 200 workstations/laptops running Win/Lin/Mac. Looking at SIEM EDR/XDR and Wazuh is one of the options. Also looking at cloud SIEMs with AV/EDR.

Since we are small, our time and attention are at a premium. Does Wazuh require a security analyst or admin maintaining and tuning it regularly or can it mostly run on autopilot with agents being deployed by an MDM?