Wazuh Agent

This role is designed to install and configure Wazuh Agent on different hosts, this agent is compatible with Linux and Windows machines. Also, has the ability to register the agent using the ossec-authd service on the Wazuh Manager, you can use several variables to customize the installation:

  • wazuh_manager_ip: set Wazuh server to connect.

  • wazuh_agent_authd: array with a set of options to register the Wazuh agent on the Wazuh server, will require the ossec-authd service started on the Wazuh server.

For example, create a YAML file wazuh-agent.yml to be used as an Ansible playbook:

- hosts: all:!wazuh-manager
  roles:
   - ansible-wazuh-agent

You can maintain different environments using a variable definition YAML file for each one:

  1. For production environment vars-production.yml:

wazuh_manager_ip: 10.1.1.12
wazuh_agent_authd:
  enable: true
  port: 1515
  ssl_agent_ca: null
  ssl_agent_cert: null
  ssl_agent_key: null
  ssl_auto_negotiate: 'no'

  1. For development environment vars-development.yml:

wazuh_manager_ip: 192.168.0.10
wazuh_agent_authd:
  enable: true
  port: 1515
  ssl_agent_ca: null
  ssl_agent_cert: null
  ssl_agent_key: null
  ssl_auto_negotiate: 'no'

Next, run the ansible playbook:

$ ansible-playbook wazuh-agent.yml -e@vars-production.yml

The example above for production environment will install Wazuh agent in all host except wazuh-manager. then it will register against wazuh-manager with ip 10.1.1.12.

Please review the references section to see all variables available for this role.