Add Wazuh Agent

[prathameshmalage]

I have deployed Wazuh on GKE cluster. But can anyone help or provide with any documentation on how to add Wazuh Agent.

[teddytpc1]

Hi @prathameshmalage To register/add a new agent to the Wazuh cluster deployed with kubernetes you should:

1. Install the agent in the host you want to monitor.
2. Configure the ossec.conf. You have to replace the MANAGER_IP with the workers' LB DNS. To obtain the DNS you can use:

kubectl get svc -n wazuh

3. Register the agent against the master's LB DNS with the following command (you can also obtain the DNS with the previous command). Make sure to replace the <MASTER_LB_DNS> with the obtained value and the default password is password:

/var/ossec/bin/agent-auth -m <MASTER_LB_DNS> -p password

NOTE: both, the LB for master and workers should be reachable from the agent's host.

4. Check in the Dashboard if the agent is connected.