Remote service
The Wazuh manager can be configured to publish the remote service used by agents as follows:
Configuration
All of the configuration of Remote Service is done via the ossec.conf
file using the <remote>
XML tag. The available options are detailed in Remote config.
You can change the IP address used to listen the service with the following configuration:
<ossec_config>
<remote>
<local_ip>10.0.0.10</local_ip>
</remote>
</ossec_config>
This will set the manager to listen on IP address to 10.0.0.10.
When you change any value in the ossec.conf
file, you must restart the service before these changes will take effect.
For Systemd:
# systemctl restart wazuh-manager
For SysV Init:
# service wazuh-manager restart