Remote service

The Wazuh Manager can be configured to publish the remote service used by agents as follows:

Configuration

All of the configuration of Remote Service is done via the ossec.conf file using the <remote> XML tag. The available options are detailed in Remote config.

You can change the IP address used to listen the service with the following configuration:

<ossec_config>
  <remote>
    <local_ip>10.0.0.10</local_ip>
  </remote>
</ossec_config>

This will set the manager to listen on IP address to 10.0.0.10.

When you change any value in the ossec.conf file, you must restart the service before these changes will take effect.

  1. For Systemd:
# systemctl restart wazuh-manager
  1. For SysV Init:
# service wazuh-manager restart