Wazuh Agents across multiple machines and don't want to create each agent manually

522 views
Skip to first unread message

LE SOK

unread,
Aug 17, 2023, 5:40:08 AM8/17/23
to Wazuh mailing list
Im using wazuh 4.5.0-1 on Linux wazuh-server 4.14.320-243.544.amzn2.x86_64 #1 SMP Tue Aug 1 21:03:08 UTC 2023 x86_64 X86_64 GNU/Linux. so I want to deploy agent for multuple endpoint(Windows 10, 7) using CMD command. How can I do it, becuase I try to install wazuh.exe on endpoint and try to run (wazuh-agent-4.5.0-1.msi /q WAZUH_MANAGER="10.0.0.2") and (NET START Wazuh) but it's doesn't work so how can I deploy agent multiple endpoint. please help me. My thank to you.
wazuh-agent-4.5.0-1.msi /q WAZUH_MANAGER="10.0.0.2"  w asdazuh-agent-4.5.0-1.msi /q WAZUH_MANAGER="10.0.0.2"wazuh-agent-4.5.0-1.msi /q WAZUH_MANAGER="10.0.0.2"wazuh-agent-4.5.0-1.msi /q WAZUH_MANAGER="10.0.0.2" wasdaz uh-agent-4.5.0-1.msi /q WAZUH_MANAGER="10.0.0.2"wazuh-agent-4.5as.0-1.msi /q WAZUH_MANAGER="10.0.0.2"wazuh-agent-4.5.0-1.msi /q WAZUH_MANAGER="10.0.0.2"

Md. Nazmur Sakib

unread,
Aug 17, 2023, 6:56:51 AM8/17/23
to Wazuh mailing list

Hi LE SOK,

Hope you are doing well. Thank you for using Wazuh.


An alternative solution can be:

Go to Wazuh-Dashboard.

Click on the agent tab. Inside the agent tab click on  Deply new agent.


After that fill up all the information correctly:

Choose the operating system

Choose the version

Choose the architecture

Wazuh server address

Assign an agent name

Select one or more existing groups


Run PowerShell 3.0 or greater with administrator privilege.


Run the command that is generated for you 

Ex:


 


Start the agent:

NET START WazuhSvc

Please let me know if this solves your problem. 


Regards
Message has been deleted

Md. Nazmur Sakib

unread,
Aug 21, 2023, 4:20:12 AM8/21/23
to Wazuh mailing list
Hi LE SOK,There is no pre-installed utility in CMD that has the capability to download files. That is why it is preferred to use Windows PowerShell to directly download and install Wazuh-agent.I have made a workaround that you can use if you want to download and install the agent via CMD.Run CMD as administrator.Go to the folder where you want to download the MSI file.cd C:\Users\User\DocumentsInstall and Configure Choco software management automation for Windows.@"%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -InputFormat None -ExecutionPolicy Bypass -Command "iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))" && SET "PATH=%PATH%;%ALLUSERSPROFILE%\chocolatey\bin"Install curl using chocochoco install curl --version=7.77.0Download the agent MSI file.curl --output wazuh-agent-4.5.0-1.msi https://packages.wazuh.com/4.x/windows/wazuh-agent-4.5.0-1.msiAdd additional configuration you want to push inside your agent configuration during installation and run installation.wazuh-agent-4.5.0-1.msi /q WAZUH_MANAGER="192.168.44.134" WAZUH_AGENT_NAME="WinSakib"For more information about deployment attributes check this document: https://documentation.wazuh.com/current/user-manual/deployment-variables/deployment-variables-windows.htmlStart the agent
NET START WazuhSvcAlso, check this document for agent installation guidelines in Windows: https://documentation.wazuh.com/current/installation-guide/wazuh-agent/wazuh-agent-package-windows.html

Please let me know if this solves your issue.

Regards 

LE SOK

unread,
Aug 22, 2023, 4:04:37 AM8/22/23
to Wazuh mailing list
After I try run command follow your it's doesn't work sir. I don't know why it's dont show error when I start WazuhSvc it's stared but when I try to view on Wazuh it's dont show agent i just create. Please guide for me if u test it work.
My thank to you.
Regards 
Reply all
Reply to author
Forward
0 new messages