How to monitor the same machine wherein wazuh server/indexer/dashboard is installed?how to integrate my tomcat server installed in a window machine to my wazuh dashboard ?

[Siddhant Thapliyal]

i know that wazuh agent need not be deployed / (cannot be deployed) to the same machine wherein wazuh central components are deployed as it takes id 000 defalut to analyze the same machine as an agent, but im not able to configure it , please can someone shed a light on how to configure that same machine (where in central components are installed ) as an agent for the wazuh dashboard.

i have to integrate tomact with wazuh dashboard :-

1. first server is installed in my windows machine which is also added as an wazuh agent to be monitored by wazuh dashboard.

2. Another tomcat is ip whitelisted and port forwarded so that it can be accessed by any machine,and this tomcat is installed in the same machine wherein wazuh central components are installed .....in my previous question ive asked relating this only how to add my localhost as a wazuh agent for the same localhost wherein central components are installed.Pls help out this one is necessary and imp.

Thanks in advance!

[Diego Ariel Balbuena]

Hi Siddhant !! Thank you for sharing with the community

You don't need to install the Wazuh Agent on the same machine where Wazuh Manager is installed.

You can configure the ossec.conf file with the same modules as configured in the agent.conf

Reference: https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/index.html

In that way, its alerts will be triggered under ID 000

I hope this helps!

Diego