Trying to install wazuh agent on security onion

[Matt Dunlop]

I am trying to install a wazuh agent on my security onion sensor and have it talk to a wazuh server but it's not talking.

[Wes Lambert]

Hi Matt, 

Security Onion installationa already come with their own Wazuh agent and Manager on each box.

Thanks,

Wes

On Thu, Aug 29, 2019, 9:29 AM Matt Dunlop <matthew...@gmail.com> wrote:

I am trying to install a wazuh agent on my security onion sensor and have it talk to a wazuh server but it's not talking.

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/security-onion/e2075711-868a-416a-9f72-f07b49826073%40googlegroups.com.

[Matt Dunlop]

wes where is it in the documentation? or how is it accessed?

On Thursday, August 29, 2019 at 9:53:46 AM UTC-4, Wes wrote:

Hi Matt, 

Security Onion installationa already come with their own Wazuh agent and Manager on each box.

Thanks,

Wes

On Thu, Aug 29, 2019, 9:29 AM Matt Dunlop <matthe...@gmail.com> wrote:

I am trying to install a wazuh agent on my security onion sensor and have it talk to a wazuh server but it's not talking.

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.

To unsubscribe from this group and stop receiving emails from it, send an email to securit...@googlegroups.com.

[Wes Lambert]

All Wazuh configuration is located in /var/ossec/.

You can manage agents with /var/ossec/bin/manage_agents

Thanks,

Wes

To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/security-onion/b7133fee-393d-4251-8d6f-a6d777b15581%40googlegroups.com.

--

https://twitter.com/therealwlambert

https://securityonion.net/

[Doug Burks]

Hi Matt,

Here's the Wazuh page in our documentation:

https://securityonion.readthedocs.io/en/latest/wazuh.html

Hope that helps!

On Thu, Aug 29, 2019 at 5:06 PM Matt Dunlop <matthew...@gmail.com> wrote:

To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/security-onion/b7133fee-393d-4251-8d6f-a6d777b15581%40googlegroups.com.

--

Doug Burks
CEO
Security Onion Solutions, LLC

[Kevin Branch]

Do you have an established Wazuh manager separate from your Security Onion system(s) and you want your SO system(s) to report in to it like perhaps all your other Wazuh agents are doing?

Or are you just trying to get Wazuh agent on an SO senor to report to Wazuh manager on an SO server?

Kevin

On Thu, Aug 29, 2019 at 9:29 AM Matt Dunlop <matthew...@gmail.com> wrote:

I am trying to install a wazuh agent on my security onion sensor and have it talk to a wazuh server but it's not talking.

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/security-onion/e2075711-868a-416a-9f72-f07b49826073%40googlegroups.com.