Installing Wazuh agents on Solaris systems
The agent runs on the host you want to monitor and communicates with the Wazuh manager, sending data in near real time through an encrypted and authenticated channel.
To start the installation process, select your architecture: i386 or Sparc. Alternatively, if you want to download the Wazuh agent package directly, see the packages list section.
Select your Solaris Intel version.
Download the Wazuh agent for Solaris 10 i386 package.
To complete the process, install the agent.
# pkgadd -d wazuh-agent_v4.1.5-sol10-i386.pkg
Download the Wazuh agent for Solaris 11 i386.
Install the agent:
# pkg install -g wazuh-agent_v4.1.5-sol11-i386.p5p wazuh-agent
If the Solaris 11 zone where you want to install the package has child zones, create a repository to install the Wazuh agent:
# pkg set-publisher -g wazuh-agent_v4.1.5-sol11-i386.p5p wazuh && pkg install --accept wazuh-agent && pkg unset-publisher wazuh
Select your Solaris Sparc version.
Download the Wazuh agent for Solaris 10 Sparc package.
To complete the process, install the agent.
# pkgadd -d wazuh-agent_v4.1.5-sol10-sparc.pkg
Download the Wazuh agent for Solaris 11 Sparc.
Install the agent:
# pkg install -g wazuh-agent_v4.1.5-sol11-sparc.p5p wazuh-agent
If the Solaris 11 zone where you want to install the package has child zones, create a repository to install the Wazuh agent:
# pkg set-publisher -g wazuh-agent_v4.1.5-sol11-sparc.p5p wazuh && pkg install --accept wazuh-agent && pkg unset-publisher wazuh
The installation process is now complete and the Wazuh agent is successfully installed on your Solaris system. The next step is to register and configure the agent to communicate with the Wazuh manager. To perform this action, see the Registering Wazuh agents section.
Uninstall a Wazuh agent
To uninstall the agent, select your Solaris version.
To uninstall the Wazuh agent in Solaris 10, run the following command:
# pkgrm wazuh-agent
To uninstall the Wazuh agent in Solaris 11, run the following command:
# pkg uninstall wazuh-agent
Note
If you uninstall the Wazuh agent in Solaris 11.4 or later, the Solaris 11 package manager does not remove the group ossec from the system. To remove it manually, run the groupdel ossec command.
The Wazuh agent is now completely removed from your Solaris system.