Skip to content

Agent Linux

Jump to bottom
eric-holtzclaw edited this page Jun 19, 2017 · 11 revisions

Install and configure the Agent Linux

#RPM based
cat /etc/*release

#Remove Agent check rpm -qa | grep osse rpm -e ossec-hids-2.9.0-49.el7.art.x86_64 ossec-hids-server-2.9.0-49.el7.art.x86_64

#add repo vi /etc/yum.repos.d/wazuh.repo [wazuh_repo] gpgcheck=1 gpgkey=https://packages.wazuh.com/key/GPG-KEY-WAZUH enabled=1 name=RHEL-$releasever - Wazuh baseurl=https://packages.wazuh.com/yum/rhel/$releasever/$basearch protect=1

#Install agent yum install wazuh-agent -y #Manage and add a Key /var/ossec/bin/manage_agents #Choose I to import the key below xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

#Add the manager IP vi /var/ossec/etc/ossec.conf 54.212.193.255

#Restart the Agent /var/ossec/bin/ossec-control restart

Clone this wiki locally