Wazuh Agent
This role is designed to install and configure Wazuh Agent on different hosts, this agent is compatible with Linux and Windows machines. Also, has the ability to register the agent using the ossec-authd
service on the Wazuh Manager, you can use several variables to customize the installation:
wazuh_manager_ip: set Wazuh server to connect.
wazuh_agent_authd: array with a set of options to register the Wazuh agent on the Wazuh server, will require the
ossec-authd
service started on the Wazuh server.
For example, create a YAML file wazuh-agent.yml
to be used as an Ansible playbook:
- hosts: all:!wazuh-manager
roles:
- ansible-wazuh-agent
You can maintain different environments using a variable definition YAML file for each one:
For production environment
vars-production.yml
:
wazuh_managers:
- address: 10.1.1.12
port: 1514
protocol: udp
wazuh_agent_authd:
enable: true
port: 1515
ssl_agent_ca: null
ssl_auto_negotiate: 'no'
For development environment
vars-development.yml
:
wazuh_managers:
- address: 192.168.0.10
port: 1514
protocol: udp
wazuh_agent_authd:
enable: true
port: 1515
ssl_agent_ca: null
ssl_auto_negotiate: 'no'
Next, run the ansible playbook:
$ ansible-playbook wazuh-agent.yml -e@vars-production.yml
The example above for production environment will install Wazuh agent in all host except wazuh-manager
. then it will register against wazuh-manager
with ip 10.1.1.12
.
Please review the references section to see all variables available for this role.