WAZUH_MANAGER variable not set on Ubuntu at install time

[Mihai Bobos]

Hi

I am trying to install Wazuh agent on a number of servers

The only issue I get is on Ubuntu

I try to install using the following command:

WAZUH_MANAGER="Manager_IP_Address" apt-get install wazuh-agent

The apt repo is set up correctly

The package is installed correctly but the manager IP address is not set

The line from ossec.conf looks like this:

 <address>MANAGER_IP</address>

if I manually replace MANAGER_IP with the ip address I already set in install command then it works, but I don't wont to do this for all servers

On Redhat based distros (Alma/CentOS) it all works fine

Can you tell me what I am doing wrong?

[Farouk Musa]

Hello Mihai,

In this command  WAZUH_MANAGER="Manager_IP_Address" apt-get install wazuh-agent can you confirm if  Manager_IP_Address is the redacted one or that is the actual command you have run? The correct format is  WAZUH_MANAGER="<manager IP>" apt-get install wazuh-agent where <manager IP> should be replaced with the actual IP of the wazuh server for example WAZUH_MANAGER="10.0.0.2" apt-get install wazuh-agent

[Mihai Bobos]

hello

Yes, that is an actual IP address

eg: the command I use is like this:

WAZUH_MANAGER="10.11.12.13" apt-get install wazuh-agent

and the corresponding line in the resulting /var/ossec/etc/ossec.conf is:

      <address>MANAGER_IP</address>

--
You received this message because you are subscribed to a topic in the Google Groups "Wazuh | Mailing List" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/wazuh/1jo7y5HMasU/unsubscribe.
To unsubscribe from this group and all its topics, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/3a773e8d-62bf-482a-811e-b86da072120bn%40googlegroups.com.

[Farouk Musa]

I just tested this on an Ubuntu 22.04 endpoint and it works just as expected. Perhaps there was some issue with the copy/paste. try to type out the command and try again. If the issue persists, please  provide some more information about the issue like if it affects multiple ubuntu endpoints

[Nick J]

Sorry to add to this one, I have exactly the same problem with a debian agent install, doesn't matter what details I pass during installation and how, none of the configuration appears in ossec.conf. 

I've tried a mixture of the advised variable. with or without the ", ' and or without either of course with set details. 

WAZUH_MANAGER="10.0.0.2" WAZUH_REGISTRATION_SERVER="10.0.0.2" WAZUH_REGISTRATION_PASSWORD="TopSecret" WAZUH_AGENT_GROUP="my-group" apt-get install wazuh-agent

I dont know if it makes any difference, but there is no enrollment section in ossec.conf

On Thursday, July 25, 2024 at 1:30:02 PM UTC+1 Mihai Bobos wrote: