Digging more, there is a ini file, that saves the IP for the server:
#######################################################################
# LogRhythm System Monitor Agent Configuration File
# Copyright 2008-2017 LogRhythm, Inc.
#
# Comments begin with '#', blank lines are ignored
#######################################################################
# Mediator sections - up to 3 Mediators are supported
# Each Mediator has its own section with an incrementing header number: [Mediator n]
[General]
# Default scsm.log logging level is VERBOSE
LogLevel=4
EntityID=
[Mediator 1]
# IP address or DNS name of the Mediator this Agent will connect to.
Host=xx.xx.xx.xx
# Port number the Mediator is listening on
ServerPort=443
# IP address or index of the address to use for transmitting messages to the Mediator.
# This is either a static IP v4/v6 address (recommended) or the zero-based index of the
# address to use from a list of all available IP addresses. The family (i.e., IP v4/v6)
# is dependent on the Host property above. Valid values are:
#
# - static IP v4/v6 Address
# - index of address to use, for example:
# - '0' for the first available IP address
# - '2' for the third available IP address
ClientAddress=xx.xx.xx.xx
# Port number to use for transmitting messages to the Mediator.
ClientPort=0
The bolded part needs to be filled in with the IP of the current primary NIC.
What I can do, using ansible, install the exe for the agent, copy the scsm.ini file from an existing server.
But how can I then fill in the IP section for the server in the ini file?