wazuh-manager-remoted
The wazuh-manager-remoted executable runs the Wazuh manager agent connection service.
The agent connection service establishes and maintains secure communication with Wazuh agents. It receives events from connected agents, decrypts and enriches them with connection metadata, and forwards them to the Wazuh Normalization Engine for processing.
By default, the service listens for secure Wazuh agent connections on TCP port 1514. It can also receive syslog events when configured to do so.
For more information about the agent connection service and its configuration, see the Agent connection service section of the User Manual.
Option |
Description |
|---|---|
-c <config> |
Specifies the configuration file to use. The default is etc/wazuh-manager.conf. |
-d |
Runs the daemon in debug mode. Repeat the option to increase the debug level. |
-D <directory> |
Specifies the directory to chroot into. The default is /var/wazuh-manager. |
-f |
Runs the daemon in the foreground. |
-g <group> |
Specifies the group under which the daemon runs. The default is wazuh-manager. |
-h |
Displays the help message and exits. |
-m |
Prevents the creation of the shared merged file (read-only). |
-t |
Tests the configuration and exits. |
-u <user> |
Specifies the user under which the daemon runs. The default is wazuh-manager. |
-V |
Displays version and license information. |