wazuh agent installation failure

632 views
Skip to first unread message

Rugui Kiriungi

unread,
Apr 4, 2024, 6:43:14 AM4/4/24
to Wazuh | Mailing List
Greetings, 

I had installed wazuh agent on windows server 2022 and everything was working great. Tried configuring FIM but the logs were not showing up so I decided to uninstall the agent and reinstall but that is where my issues begun.

I have tried installing through the MSI, but the ossec folder doesn't get created and also wazuh isn't on the list of installed applications. Using powershell, it generates an error the service name is invalid. I am installing as administrator in both scenarios and still nothing!

Kindly assist

Tomas Sarquis

unread,
Apr 4, 2024, 9:38:13 AM4/4/24
to Wazuh | Mailing List
Hi Rugui

Which version or Wazuh Agent are you into?

Did the MSI installer show up any error/warning message?
Isn't there any installation log file in the installation directory? The directory is, by default, "C:\Program Files (x86)\ossec-agent\".

Feel free to share screenshots or any information you think could be handy.

Rugui Kiriungi

unread,
Apr 4, 2024, 10:13:44 AM4/4/24
to Wazuh | Mailing List
Hi Tomas, thanks for getting back to me promptly.

I am using wazuh agent 4.7. The MSI installer finishes the install without any errors BUT there is no Ossec folder in the default location, therefore no installation log file or anything like ossec-agent folder. 

I haven't experienced anything like this before.

Tomas Sarquis

unread,
Apr 4, 2024, 11:11:57 AM4/4/24
to Wazuh | Mailing List
Good. 

Can you show me the exact error the command-line installation process have thrown? I mean the Powershell one.

Rugui Kiriungi

unread,
Apr 5, 2024, 3:16:18 AM4/5/24
to Wazuh | Mailing List
here is the screenshot
IMG-20240405-WA0001.jpg

Tomas Sarquis

unread,
Apr 5, 2024, 7:51:52 AM4/5/24
to Wazuh | Mailing List
It seems like the service was not correctly installed. Did you follow the correct documentation, right? 

What was the output of the command ".\wazuh-agent-4.7.3-1.msi /q WAZUH_MANAGER="10.0.0.2"" ?
Reply all
Reply to author
Forward
0 new messages