Agent deployment on Windows 10 into Wazuh v3.2.1

687 views
Skip to first unread message

Michael Kasede

unread,
Mar 21, 2018, 11:09:03 AM3/21/18
to Wazuh mailing list
Hi I am using Wazuh Virtual machine to setup HIDS in my home lab. I downloaded and installed the windows agent installer to automatically register the windows PC on Wazuh but it does not pick the authentication key. After that failed to work I checked the wazuh blog for a solution at: https://blog.wazuh.com/automatically-deploying-ossec-to-windows-using-wazuh-api/
I went to the page and downloaded the files made available and I modified the deploy.bat file. I run it as administrator and this is what I got in the ossec log:
Starting
Certify OK
Installing WAZUH
WAZUH Installed OK
Added server-ip to ossec.conf
Some error adding the agent Exception calling "GetRequestStream" with "0" argument(s): "The underlying connection was closed: An unexpected error occurred on a send."

What could be the problem? I have tried the solutions provided on the blog, documentation site and even looked for video tutorials but nothing seems to work.
agent_deploy.ps1
ossec.conf

alberto....@wazuh.com

unread,
Mar 21, 2018, 11:52:43 AM3/21/18
to Wazuh mailing list
Hello Michael

  The blog entry you have used is for Wazuh 2.x version deployment. Now, as we use MSI, the package can be used without external scripts. Although you can consider the following script attached to this reply. You only need to change the parameters (Manager IP, the password if needed, etc) and execute it as Administrator. 

If you need further assistance, please let us know. 
Best regards, 

alberto....@wazuh.com

unread,
Mar 21, 2018, 11:53:25 AM3/21/18
to Wazuh mailing list
Here the attached script
agent_deploy_msi.ps1

alberto....@wazuh.com

unread,
Mar 21, 2018, 12:41:49 PM3/21/18
to Wazuh mailing list
Hello again Michael

I forgot to change the line:


so please modify it by 


In order to have the latest version of the agent. Sorry for the inconveniences. 
Reply all
Reply to author
Forward
0 new messages