Register Agents
Two requests are needed to register an agent using the API:
POST /agents (reference)
PUT /agents/:agent_name (reference)
We have prepared a few scripts in different programming languages to help with the task of registering an agent with the API:
Basically, the scripts perform the following steps:
Step 1: Add the agent to the manager.
# curl -u foo:bar -k -X POST -d 'name=NewAgent&ip=10.0.0.8' https://API_IP:55000/agents
{"error":0,"data":"001"}
Step 2: Get the agent key.
# curl -u foo:bar -k -X GET https://API_IP:55000/agents/001/key
{"error":0,"data":"MDAxIE5ld0FnZW50IDEwLjAuMC44IDM0MGQ1NjNkODQyNjcxMWIyYzUzZTE1MGIzYjEyYWVlMTU1ODgxMzVhNDE3MWQ1Y2IzZDY4M2Y0YjA0ZWVjYzM="}
Step 3: Copy the key to the agent.
# /var/ossec/bin/manage_agents -i MDAxIE5ld0FnZW50IDEwLjAuMC44IDM0MGQ1NjNkODQyNjcxMWIyYzUzZTE1MGIzYjEyYWVlMTU1ODgxMzVhNDE3MWQ1Y2IzZDY4M2Y0YjA0ZWVjYzM=
Warning
If you paste the command directly into the terminal, the agent key will be saved in the bash history. Use manage_agents
without arguments or from a script.
Step 4: Restart the agent.
# /var/ossec/bin/ossec-control restart