Installing Wazuh agents on HP-UX endpoints

The installed agent runs on the endpoint you want to monitor and communicates with the Wazuh server, sending data in near real-time through an encrypted and authenticated channel.

  1. To start the installation process, download the HP-UX installer.

  2. Create the wazuh user and group.

    # groupadd wazuh
# useradd -G wazuh wazuh

  3. Unzip the package in /.

    # tar -xvf wazuh-agent-4.3.10-1-hpux-11v3-ia64.tar

  4. Edit /var/ossec/etc/ossec.conf and add the Wazuh manager IP address. The agent registers automatically with the manager through enrollment, configuration details can be found in the Enrollment section.

    <server>
  <address>WAZUH_MANAGER_IP</address>
  <port>1514</port>
  <protocol>tcp</protocol>
</server>

  5. To complete the installation and registration process, start the Wazuh agent service.

    # /sbin/init.d/wazuh-agent start

The installation process is now complete, and the Wazuh agent is successfully installed and registered.

Uninstall a Wazuh agent

To uninstall the agent, follow these steps:

  1. Stop the Wazuh agent service.

    # /var/ossec/bin/wazuh-control stop

  2. Delete wazuh user and group:

    # groupdel wazuh
# userdel wazuh

  3. Remove Wazuh files.

    # rm -rf /var/ossec

The Wazuh agent is now completely removed from your HP-UX endpoint.