Installing Wazuh agents on HP-UX systems

The installed agent runs on the host you want to monitor and communicates with the Wazuh manager, sending data in near real time through an encrypted and authenticated channel.

  1. To start the installation process, download the HP-UX installer.

  2. Create the ossec user and group.

    # groupadd ossec
    # useradd -G ossec ossec
    
  3. Unzip the package in /.

    # tar -xvf wazuh-agent-4.2.7-1-hpux-11v3-ia64.tar
    
  4. Edit /var/ossec/etc/ossec.conf and add the Wazuh manager IP address. The agent registers automatically with the manager through enrollment, configuration details can be found on the Enrollment section.

    <server>
      <address>WAZUH_MANAGER_IP</address>
      <port>1514</port>
      <protocol>tcp</protocol>
    </server>
    
  5. To complete the installation and registration process, start the Wazuh agent service.

    # /sbin/init.d/wazuh-agent start
    

The installation process is now complete and the Wazuh agent is successfully installed and registered.

Uninstall a Wazuh agent

To uninstall the agent, follow these steps:

  1. Stop the Wazuh agent service.

    # /var/ossec/bin/wazuh-control stop
    
  2. Delete ossec user and group.

    # groupdel ossec
    # userdel ossec
    
  3. Remove Wazuh files.

    # rm -rf /var/ossec
    

The Wazuh agent is now completely removed from your HP-UX system.