Installing Wazuh agents on Solaris endpoints
The agent runs on the host you want to monitor and communicates with the Wazuh manager, sending data in near real-time through an encrypted and authenticated channel.
To start the installation process, select your architecture: i386 or SPARC.
Note
You need root user privileges to run all the commands described below.
Select your Solaris Intel version.
Download the Wazuh agent for Solaris 10 i386 package.
Install the Wazuh agent.
# pkgadd -d wazuh-agent_v4.7.0-sol10-i386.pkg wazuh-agent
Download the Wazuh agent for Solaris 11 i386.
Install the Wazuh agent.
# pkg install -g wazuh-agent_v4.7.0-sol11-i386.p5p wazuh-agent
If the Solaris 11 zone where you want to install the package has child zones, create a repository to install the Wazuh agent:
# pkg set-publisher -g wazuh-agent_v4.7.0-sol11-i386.p5p wazuh && pkg install --accept wazuh-agent && pkg unset-publisher wazuh
Select your Solaris SPARC version.
Download the Wazuh agent for Solaris 10 SPARC package.
Install the Wazuh agent.
# pkgadd -d wazuh-agent_v4.7.0-sol10-sparc.pkg wazuh-agent
Download the Wazuh agent for Solaris 11 SPARC.
Install the Wazuh agent.
# pkg install -g wazuh-agent_v4.7.0-sol11-sparc.p5p wazuh-agent
If the Solaris 11 zone where you want to install the package has child zones, create a repository to install the Wazuh agent:
# pkg set-publisher -g wazuh-agent_v4.7.0-sol11-sparc.p5p wazuh && pkg install --accept wazuh-agent && pkg unset-publisher wazuh
The installation process is now complete, and the Wazuh agent is successfully installed on your Solaris endpoint. The next step is to register and configure the agent to communicate with the Wazuh server. To perform this action, see the Wazuh agent enrollment section.
Uninstall a Wazuh agent
To uninstall the agent, select your Solaris version.
To uninstall the Wazuh agent in Solaris 10, run the following command:
# pkgrm wazuh-agent
To uninstall the Wazuh agent in Solaris 11, run the following command:
# /var/ossec/bin/wazuh-control stop
# pkg uninstall wazuh-agent
Note
If you uninstall the Wazuh agent in Solaris 11.4 or later, the Solaris 11 package manager does not remove the group wazuh from the system. To remove it manually, run the groupdel wazuh command.
The Wazuh agent is now completely removed from your Solaris endpoint.