This is the documentation for Wazuh 2.1. Check out the docs for the latest version of Wazuh!

Register Agents

Two requests are needed to register an agent using the API:

We have prepared a few scripts in different languages to help with the task of registering an agent with the API:

Basically, the scripts perform the following steps:

Step 1: Add the agent to the manager.

$ curl -u foo:bar -k -X POST -d 'name=NewAgent&ip=10.0.0.8' https://API_IP:55000/agents
{"error":0,"data":"001"}

Step 2: Get the agent key.

$ curl -u foo:bar -k -X GET https://API_IP:55000/agents/001/key
{"error":0,"data":"MDAxIE5ld0FnZW50IDEwLjAuMC44IDM0MGQ1NjNkODQyNjcxMWIyYzUzZTE1MGIzYjEyYWVlMTU1ODgxMzVhNDE3MWQ1Y2IzZDY4M2Y0YjA0ZWVjYzM="}

Step 3: Copy the key to the agent.

$ /var/ossec/bin/manage_agents -i MDAxIE5ld0FnZW50IDEwLjAuMC44IDM0MGQ1NjNkODQyNjcxMWIyYzUzZTE1MGIzYjEyYWVlMTU1ODgxMzVhNDE3MWQ1Y2IzZDY4M2Y0YjA0ZWVjYzM=

Warning

If you paste the command directly in the terminal, the agent key will be saved in the bash history. Use manage_agents without arguments or from a script.

Step 4: Restart the agent.

$ /var/ossec/bin/ossec-control restart