Linux and Unix agents

Open a session in your Linux/Unix agent host as root user. After that, you can register the Agent using agent-auth as follows:

  1. On the agent, run the agent-auth program, using the manager's IP address.

# /var/ossec/bin/agent-auth -m <MANAGER_IP_ADDRESS>

  1. Edit the Wazuh agent configuration to add the Wazuh server IP address.

In the file /var/ossec/etc/ossec.conf, in the <client><server> section, change the MANAGER_IP value to the Wazuh server address:

<client>
  <server>
    <address>MANAGER_IP</address>
    ...
  </server>
</client>

  1. Start the agent.

  1. For Systemd:

# systemctl start wazuh-agent

  1. For SysV Init:

# service wazuh-agent start

  1. Other cases:

# /var/ossec/bin/ossec-control start