This is the documentation for Wazuh 3.3. Check out the docs for the latest version of Wazuh!

wodle name=”syscollector”

XML section name

<wodle name="syscollector">
</wodle>

Configuration options of the Syscollector wodle for system monitoring.

Options

Options Allowed values
disabled yes, no
interval A positive number (seconds)
scan_on_start yes, no
hardware yes, no
os yes, no
packages yes, no

disabled

Disable the Syscollector wodle.

Default value no
Allowed values yes, no

interval

Time between system scans.

Default value 1h
Allowed values A positive number that should contain a suffix character indicating a time unit, such as, s (seconds), m (minutes), h (hours), d (days).

scan_on_start

Run a system scan immediately when service is started.

Default value yes
Allowed values yes, no

hardware

Enables the hardware scan.

Default value yes
Allowed values yes, no

os

Enables the OS scan.

Default value yes
Allowed values yes, no

packages

Enables the packages scan.

Default value yes
Allowed values yes, no

Example of configuration

<wodle name="syscollector">
  <disabled>no</disabled>
  <interval>1h</interval>
  <scan_on_start>yes</scan_on_start>
  <hardware>yes</hardware>
  <os>yes</os>
  <packages>yes</packages>
</wodle>