adding agents in bulk without manual intervention

[ranjit nepal]

Hi,

Is it possible to add agents in bulk without manual intervention?

What i mean is when agents are installed there is need to enter manager ip (via ui dialog or directly changing conf file). When dealing with 100s of agents installation this becomes quite difficult? Is there an easier way to handle this?

--

Thanks and Regards,

Ranjit

[Jonathan Martín Valera]

Is it possible to add agents in bulk without manual intervention?

Yes, I think what you are looking for are the deployment variables https://documentation.wazuh.com/current/installation-guide/wazuh-agent/deployment-variables/deployment-variables.html. With these variables you can specify a specific configuration at the time of agent installation, so after installing you won’t have to apply that configuration.

For example, imagine you want to install an agent with yum and register-connect it directly to the wazuh-manager with IP 10.0.0.2, and specify a custom agent name and the udp connection protocol:

# WAZUH_MANAGER="10.0.0.2" WAZUH_REGISTRATION_SERVER="10.0.0.2" WAZUH_AGENT_NAME="yum-agent" \
     WAZUH_PROTOCOL="udp" yum install wazuh-agent

This command that installs and configures Wazuh can be added to different custom scripts for your installation, and thus do it in a massive and unattended way.

You can also make use of tools that allow you to perform provisioning and remote actions. My recommendation for these cases is to use the Ansible tool (https://www.ansible.com/overview/how-ansible-works), with which you can launch these installation and configuration commands in a simple way.

Information about Wazuh deployments with Ansible can be found here https://documentation.wazuh.com/current/deploying-with-ansible/index.html.

I hope you find this information helpful.

Regards.

​