wazuh agent for FreeBSD

Adiel Jesus Navarro Rosado

unread,

Jul 6, 2018, 11:10:17 AM7/6/18

to wa...@googlegroups.com

Which agent I have to install in FreeBSD?

How can I install it?

C. L. Martinez

unread,

Jul 6, 2018, 1:51:43 PM7/6/18

to wa...@googlegroups.com

On Fri, Jul 06, 2018 at 03:10:14PM +0000, Adiel Jesus Navarro Rosado wrote:
> Which agent I have to install in FreeBSD?
> How can I install it?
>
>

I have several wazuh agents installed under FreeBSD 11.1/11.2 amd64 hosts without problems (when you use 3.3.x). Only requisite is to install gmake ...

But be aware because some options are not available for BSD systems like for example realtime for syscheck or vulnerability module ...

--
Greetings,
C. L. Martinez

Adiel Jesus Navarro Rosado

unread,

Jul 10, 2018, 12:07:59 PM7/10/18

to C. L. Martinez, wa...@googlegroups.com

How can I installed?

Do you have instructions for install the agent?

If gmake is not installed, how can I integrate via agentless?

-----Mensaje original-----
De: wa...@googlegroups.com [mailto:wa...@googlegroups.com] En nombre de C. L. Martinez
Enviado el: viernes, 06 de julio de 2018 12:52 p.m.
Para: wa...@googlegroups.com
Asunto: Re: wazuh agent for FreeBSD

--

You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.

Visit this group at https://groups.google.com/group/wazuh.

To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/20180706175140.d6ptvdgbv6qhveqt%40metallica.lab.uxdom.org.

For more options, visit https://groups.google.com/d/optout.

Adiel Jesus Navarro Rosado

unread,

Jul 10, 2018, 1:06:15 PM7/10/18

to C. L. Martinez, wa...@googlegroups.com

When I try to install wazuh agent in FreeBSD, the system send the next messages:

root@ITHHWCTX1NS02# uname -a

FreeBSD ITHHWCTX1NS02 8.4-NETSCALER-12.0 FreeBSD 8.4-NETSCALER-12.0 #0: Fri Sep 22 09:12:52 PDT 2017 ro...@blrbld84111.citrite.net:/usr/obj/home/build/rs_120_53_3_RTM/usr.src/sys/NS64 amd64

root@ITHHWCTX1NS02# cd /tmp

root@ITHHWCTX1NS02# curl -Ls https://github.com/wazuh/wazuh/archive/v3.3.1.tar.gz | tar zx

tar: Error opening archive: Failed to open '/dev/sa0'

IF I modified the tar command, send the next messages:

root@ITHHWCTX1NS02# curl -Ls https://github.com/wazuh/wazuh/archive/v3.3.1.tar.gz | tar xvf

tar: Option f requires an argument

Usage:

List: tar -tf <archive-filename>

Extract: tar -xf <archive-filename>

Create: tar -cf <archive-filename> [filenames...]

Help: tar –help

root@ITHHWCTX1NS02# curl -Ls https://github.com/wazuh/wazuh/archive/v3.3.1.tar.gz | tar xvf wazuh-3.3.1

tar: Error opening archive: Failed to open 'wazuh-3.3.1'

^C

root@ITHHWCTX1NS02# curl -Ls https://github.com/wazuh/wazuh/archive/v3.3.1.tar.gz | tar xvf wazuh-3.3.1.tar

tar: Error opening archive: Failed to open 'wazuh-3.3.1.tar'

root@ITHHWCTX1NS02# curl -Ls https://github.com/wazuh/wazuh/archive/v3.3.1.tar.gz | tar xv

tar: Error opening archive: Failed to open '/dev/sa0'

De: Adiel Jesus Navarro Rosado
Enviado el: martes, 10 de julio de 2018 11:08 a.m.
Para: 'C. L. Martinez'; wa...@googlegroups.com
Asunto: RE: wazuh agent for FreeBSD

How can I installed?

Do you have instructions for install the agent?

If gmake is not installed, how can I integrate via agentless?

-----Mensaje original-----
De: wa...@googlegroups.com [mailto:wa...@googlegroups.com] En nombre de C. L. Martinez
Enviado el: viernes, 06 de julio de 2018 12:52 p.m.
Para: wa...@googlegroups.com
Asunto: Re: wazuh agent for FreeBSD

On Fri, Jul 06, 2018 at 03:10:14PM +0000, Adiel Jesus Navarro Rosado wrote:

--

C. L. Martinez

unread,

Jul 11, 2018, 1:49:46 AM7/11/18

to Adiel Jesus Navarro Rosado, wa...@googlegroups.com

HI Adiel,

Does /dev/sa0 mounted read-only? Try to download to /tmp or /var/tmp dir ...

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

Adiel Jesus Navarro Rosado

unread,

Jul 17, 2018, 1:48:33 PM7/17/18

to C. L. Martinez, wa...@googlegroups.com

How can I integrate FreeBSD via agentless?

-----Mensaje original-----
De: wa...@googlegroups.com [mailto:wa...@googlegroups.com] En nombre de C. L. Martinez
Enviado el: viernes, 06 de julio de 2018 12:52 p.m.
Para: wa...@googlegroups.com
Asunto: Re: wazuh agent for FreeBSD

On Fri, Jul 06, 2018 at 03:10:14PM +0000, Adiel Jesus Navarro Rosado wrote:

--

You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

Alberto Rodriguez

unread,

Jan 14, 2019, 3:19:41 PM1/14/19

to Wazuh mailing list

Hello Adiel

Sorry for the late response. In the following link you'll find the documentation in order to configure Wazuh Manager for agentless log collection:

https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/agentless.html#agentless

a sample configuration: https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/agentless.html#sample-configuration

and how it works: https://documentation.wazuh.com/current/user-manual/capabilities/agentless-monitoring/how-it-works.html#how-it-works

Hope it help.

Best regards,

On Tuesday, July 17, 2018 at 7:48:33 PM UTC+2, Adiel Jesus Navarro Rosado wrote:

How can I integrate FreeBSD via agentless?

-----Mensaje original-----
De: wa...@googlegroups.com [mailto:wa...@googlegroups.com] En nombre de C. L. Martinez
Enviado el: viernes, 06 de julio de 2018 12:52 p.m.
Para: wa...@googlegroups.com
Asunto: Re: wazuh agent for FreeBSD

On Fri, Jul 06, 2018 at 03:10:14PM +0000, Adiel Jesus Navarro Rosado wrote:

> Which agent I have to install in FreeBSD?

> How can I install it?

>

>

I have several wazuh agents installed under FreeBSD 11.1/11.2 amd64 hosts without problems (when you use 3.3.x). Only requisite is to install gmake ...

But be aware because some options are not available for BSD systems like for example realtime for syscheck or vulnerability module ...

--

Greetings,

C. L. Martinez

--

You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

Reply all

Reply to author

Forward