What does Nezha need on each machine it watches?
An agent. The dashboard prints an install command for Linux, Windows, macOS, OpenWRT or a NAS, and each agent reports to the dashboard over gRPC. Settings such as disable_command_execute cut an agent back to read-only reporting.