Remote service

You can set how Wazuh Manager could publish their remote service used by Agents:

Configuration

All configuration of Remote Service is done via ossec.conf using <remote> XML tag, all the available options are detailed in Remote config

You can change what ip address use to listen the service:

<ossec_config>
  <remote>
    <local_ip>10.0.0.10</local_ip>
  </remote>
</ossec_config>

This will set the default listen ip address to 10.0.0.10.

When you change any value on ossec.conf file, you need to restart the service to enabling previously changed values.

  1. For Systemd:

# systemctl restart wazuh-manager

  1. For SysV Init:

# service wazuh-manager restart