Auto agents upgrade

115 views
Skip to first unread message

Александр Юсин

unread,
Sep 5, 2023, 6:38:15 AM9/5/23
to Wazuh | Mailing List

Hello! I set up the following configuration on the wazuh manager to use agent auto-update:

<agent-upgrade>
  <chunk_size>16384</chunk_size>
  <wpk_repository>packages.wazuh.com/4.x/wpk/</wpk_repository>
  <max_threads>8</max_threads>
</agent-upgrade>

Next, I need to configure this from the side of the agents, but as I see in the documentation, this section is not included in the list of centralized agent.conf settings. Do I understand correctly that I manually need to add this to the configuration of each agent? If so, then the very idea of such an automation function is meaningless, because it's easier for me to manually update agents than to prescribe more than 1000 configurations.

Antonio Kim (Wazuh)

unread,
Sep 5, 2023, 7:02:10 AM9/5/23
to Wazuh | Mailing List
Hi
Александр Юсин!

Thanks for using Wazuh!

In this case, you can apply the configuration to each agent following this documentation.

You will be able to modify all the agent's agent.conf by a group of agents or using the 'default' group which contains all the agents (unless you have modified the members of the group 'default').

Hope this information is useful for you.

Feel free to ask me any questions.

Antonio

Александр Юсин

unread,
Sep 5, 2023, 7:14:29 AM9/5/23
to Wazuh | Mailing List

I also was going to do according to this instruction as well as many things centrally before. BUT, at the beginning of this document there is a list of what can be configured through a remote agent.conf in the default group for example, and the agent-upgrade block is not there. That's the crux of my question.)

вторник, 5 сентября 2023 г. в 14:02:10 UTC+3, Antonio Kim (Wazuh):

Antonio Kim (Wazuh)

unread,
Sep 5, 2023, 9:28:37 AM9/5/23
to Wazuh | Mailing List

Hello again, Александр Юсин!

I wanted to express my appreciation for your continued engagement in helping us improve our documentation.

While it's true that the current information lacks a specific module addressing centralized updates, Wazuh is an exceptionally versatile product. You have the flexibility to combine functions, such as centrally managing parameter changes and configuring automatic agent updates. Moreover, there are numerous additional features at your disposal to tailor the product according to your preferences.

Should you have any further questions or require clarification on any topic, please do not hesitate to contact us. We are here to assist you in any way we can.

I sincerely hope the information provided thus far has proven valuable to you.

Antonio

Александр Юсин

unread,
Sep 5, 2023, 9:42:58 AM9/5/23
to Wazuh | Mailing List

Thanks for the answers, but unfortunately I still did not understand the answer to my question)) Perhaps the problem is in my poor knowledge of English or translation errors.


Could you elaborate more on whether I can use the centralized config to propagate the <agent-upgrade> block to the agents in the group (despite the fact that the documentation doesn't state this)? Or what is the alternative for bulk updating agents? but I would rather use the <agent-upgrade> module

вторник, 5 сентября 2023 г. в 16:28:37 UTC+3, Antonio Kim (Wazuh):
Reply all
Reply to author
Forward
0 new messages