Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

After deploying the Wazuh agent for Windows it is not automatically started #470

Closed
DProvinciani opened this issue Apr 1, 2022 · 1 comment
Assignees
Labels
qa_known Issues that are already known by the QA team

Comments

@DProvinciani
Copy link

Description

After doing some testing on the Wazuh cluster and agents deployment with Puppet, we identified an issue in Windows agents. Basically, when the agent is deployed, the service is not started and the user should start it manually.

In addition, the service was in disabled state so, we had to manually set the service as enabled to then start it.

@okynos
Copy link
Contributor

okynos commented Apr 4, 2022

Hello!

After test the 4.2.6 version with a simple manifest

node "win-60e1afm9cn4.home" {
  class { 'wazuh::agent':
    wazuh_register_endpoint => "xxx.xxx.xxx.xxx",
    wazuh_reporting_endpoint => "xxx.xxx.xxx.xxx"
  }
}

We can conclude that there is some setting that perform the service to not start. An specific variable that changes such behaviour is manage_client_keys https://github.com/wazuh/wazuh-puppet/blob/4.3/manifests/agent.pp#L485
This variable manage the daemon start or not in addition with the agent registration through the manager. So if you used such variable or changed its value it is an expected behaviour.

We have tested the default procedure with service started and running as a normal installation.
4.2.6 started and working
image
image

4.3.0 started and working
image
image

In another part of the test we have detected some syntax error that we will describe here #473

@okynos okynos closed this as completed Apr 4, 2022
@davidjiglesias davidjiglesias added the qa_known Issues that are already known by the QA team label Sep 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
qa_known Issues that are already known by the QA team
Projects
No open projects
Status: Done
Development

No branches or pull requests

5 participants