Changes

From SME Server
Jump to navigationJump to search

User talk:Mmccarn (view source)

Revision as of 17:57, 26 November 2017

634 bytes added ,  17:57, 26 November 2017
notes to get wazuh-agent started
Line 12: Line 12:  
status disabled</nowiki>
 
status disabled</nowiki>
 
===Agent Configuration===
 
===Agent Configuration===
−
The [https://documentation.wazuh.com/2.0/installation-guide/installing-wazuh-agent/wazuh_agent_rpm.html Wazuh Client Installation Instructions] say to use '''yum install wazuh-agent''', but this does not work...
+
The [https://documentation.wazuh.com/2.0/installation-guide/installing-wazuh-agent/wazuh_agent_rpm.html Wazuh Client Installation Instructions] say to use '''yum install wazuh-agent''' (which, since the repo created above is disabled by default, would need to be '''yum --enablerepo=wazuh install wazuh-agent''' on a SME server), but this does not work...
 +
 
 +
Instead, I had to download the rpm and do use localinstall
 +
<nowiki>mkdir -p ~/wazuh
 +
cd ~/wazuh
 +
wget https://packages.wazuh.com/yum/rhel/6Server/x86_64/wazuh-agent-2.0.1-1.rhel6.x86_64.rpm
 +
yum --enablerepo=wazuh localinstall wazuh-agent-2.0.1-1.rhel6.x86_64.rpm
 +
/var/ossec/bin/agent-auth -m <Ip.of.wazuh.srvr>
 +
</nowiki>
 +
 
 +
You also need to enter "Ip.of.wazuh.srvr" into <server-ip>...</server-ip> in this file:
 +
/var/ossec/etc/ossec.conf
 +
 
 +
Then start the agent
 +
/etc/init.d/wazuh-agent start
     
Retrieved from "https://wiki.koozali.org/Special:MobileDiff/34196"

Navigation menu