Using the CLI in Unix hosts
To register an agent using the command line, first follow the steps from the Manager section and then, from the Agent section. This guide covers the registration process for Solaris, AIX, HP-UX, etc.
Manager
In the CLI of the Wazuh manager host, we will run
manage_agents
to add the agent. In this example, we are going to add a new agent. Its name will beaix-7-agent
and its address or IP isany
.# /var/ossec/bin/manage_agents -a any -n aix-7-agent
Now, list the agents to get the ID of the
aix-7-agent
agent:# /var/ossec/bin/manage_agents -l Available agents: ID: 001, Name: aix-7-agent, IP: any
Using the ID from the previous command, extract the new agent’s key using. Copy this key because you will need it for the agent:
# /var/ossec/bin/manage_agents -e 001 Agent key information for '001' is: MDAxIGFpeC03LWFnZW50IGFueSAxNDZlMzMwZGI1NTExOGVmYzA5OTllMDhjMmEzOThkZTZiZDgwM2FiYmUxODljNDY3MDczMTE3ODlkNWFlOTY5==
Agent
Once you have added the agent in the Wazuh manager host, open a session in your Wazuh agent host as root user. After that, let's import the key and connect the agent to the manager.
First, import the key using
manage_agents
:# /var/ossec/bin/manage_agents -i MDAxIGFpeC03LWFnZW50IGFueSAxNDZlMzMwZGI1NTExOGVmYzA5OTllMDhjMmEzOThkZTZiZDgwM2FiYmUxODljNDY3MDczMTE3ODlkNWFlOTY5 Agent information: ID:001 Name:aix-7-agent IP Address:any Confirm adding it?(y/n): y Added.
Edit the Wazuh agent configuration in
/var/ossec/etc/ossec.conf
to add the Wazuh server IP address. In the<client><server>
section, change theMANAGER_IP
value to the Wazuh server address. The address of the Wazuh server can be an IP address or a DNS name:<client> <server> <address>MANAGER_IP</address> ... </server> </client>
Once you have complete the step 1 and 2, start the agent:
# /var/ossec/bin/ossec-control start