Groups
Groups
Sign in
Groups
Groups
Wazuh | Mailing List
Conversations
About
Send feedback
Help
wazuh-agent version
3,186 views
Skip to first unread message
MNB_1101
unread,
Jun 21, 2022, 12:00:05 PM
6/21/22
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Wazuh mailing list
Hi,
I want to know how wazuh-manager gets the wazuh-agent version? And what function is called on the wazuh-agent side.
I used Wazuh v4.3.3
Thanks
Belen Valdivia
unread,
Jun 21, 2022, 12:32:11 PM
6/21/22
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Wazuh mailing list
Hi,
Thanks for using Wazuh!
Wazuh agent sends keep alive messages to the manager every 10 seconds as default but this time is configurable, inside the keep alive there is the wazuh agent version and the manager saves it in its global db.
This is the function that sends the keep alive:
run_notify
https://github.com/wazuh/wazuh/blob/master/src/client-agent/notify.c#L85
This is the define with the wazuh version
https://github.com/wazuh/wazuh/blob/master/src/headers/defs.h#L70
If you run this command in the manager:
/var/ossec/bin/agent-control -i <agent_id>
you get all information about the agents.
Regards!
MNB_1101
unread,
Jun 21, 2022, 10:45:15 PM
6/21/22
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Wazuh mailing list
Thanks for your answer
Reply all
Reply to author
Forward
0 new messages