Thanks a lot for this 
In few months ago I have found your topic to try wazuh, and it is working good. After some error on my home lab, I need to install all again and remember your topic.
On my installation, I just need to set /dev/xvda1 (if I just put /dev/xvda, VM not start).
My home lab is on ProLiant DL360 Gen9.