The Wazuh manager can be configured to publish the remote service used by agents as follows:
All of the configurations of the Remote Service are done via the
ossec.conf file using the
<remote> XML tag. The available options are detailed in Remote config.
You can change the IP address used to listen the service with the following configuration:
<ossec_config> <remote> <local_ip>10.0.0.10</local_ip> </remote> </ossec_config>
This will set the manager to listen on IP address
When you change any value in the
ossec.conf file, you must restart the service before these changes will take effect.
# systemctl restart wazuh-manager
For SysV Init:
# service wazuh-manager restart