web analytics

Installing Wazuh agents on Ubuntu

1.Install Curl: (if it’s not already installed)

# sudo apt-get install curl

2. Install the GPG-key:

# sudo curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | sudo apt-key add –

3. Add the repository:

# sudo echo “deb https://packages.wazuh.com/4.x/apt/ stable main” | sudo tee -a /etc/apt/sources.list.d/wazuh.list

4. Update the package information:

# apt-get update

5. Install the Wazuh agent:

# apt-get install wazuh-agent

Once the installation is completed, open and edit the ossec.conf file to update the Wazuh manager IP address. Normally, the ossec.conf file can be found in the directory /var/ossec/etd.

6. Update the ossec.conf file to include your Wazuh manager’s IP address:

7. Enable and start the Wazuh agent:

# systemctl daemon-reload
# systemctl enable wazuh-agent
# systemctl start wazuh-agent

8. Verify the status of the Wazuh agent:

9. Verify the Ubuntu machine reporting status in the Wazuh web console: