This is the documentation for Wazuh 3.9. Check out the docs for the latest version of Wazuh!

wodle name=”agent-key-polling”

XML section name

<wodle name="agent-key-polling">
</wodle>

Configuration options of the key polling wodle.

Options

Options Allowed values
enabled yes, no
timeout A positive number (seconds)
exec_path Full path to executable
socket Full path to unix socket
threads A positive number
queue_size A positive number
force_insert yes, no

enabled

Enable the key polling wodle.

Default value yes
Allowed values yes, no

timeout

Maximum time for waiting a response from the executable.

Default value 60
Allowed values A positive number in seconds

exec_path

Full path to the executable.

Default value none
Allowed values A string indicating the full path

socket

Full path to the unix domain socket.

Default value none
Allowed values A string indicating the full path to a unix domain socket

threads

Number of threads for polling external keys.

Default value 1
Allowed values A positive number indicating the number of threads [1..32]

queue_size

Indicates the maximum size of the queue for polling external keys.

Default value 1024
Allowed values A positive number indicating the queue size [1..220000]

force_insert

Defines whether the module must insert the agent, even if another agent with the same ID or IP already exists. If enabled, the existing agent will be removed.

Default value yes
Allowed values yes, no

Example of configuration

<wodle name="agent-key-polling">
  <enabled>yes</enabled>
  <timeout>60</timeout>
  <exec_path>/usr/bin/python /home/script.py</exec_path>
  <threads>1</threads>
  <queue_size>1024</queue_size>
  <force_insert>yes</force_insert>
</wodle>