Deploy a Wazuh agent IDS - In Server Debian/Ubuntu GNU/Linux
#linux #server #wazuh
- curl -s https://packages.wazuh.com/key/GPG-KE... | gpg --no-default-keyring --keyring gnupg-ring:/usr/share/keyrings/wazuh.gpg --import && chmod 644 /usr/share/keyrings/wazuh.gpg
- echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main" | tee -a /etc/apt/sources.list.d/wazuh.list
- apt-get update
- WAZUH_MANAGER="192.168.150.666" apt-get install wazuh-agent
add connect wazuh agent :
- /var/ossec/bin/agent-auth -m 192.168.150.68 -p 1515 -A name-agent
restart wazuh agent :
- systemctl restart wazuh-agent
Referensi :
- https://documentation.wazuh.com/curre...
- https://stackoverflow.com/questions/6...
- https://www.ossec.net/docs/programs/a...