WAZUH AGENT

[Haidar Majd Merhej]

Hello every one 

I have deployed wazuh on my local K8s env recently

now I am trying to isnstall wazuh agent on vm in the same subnet of the cluster

but after install the agent and set the ip of wazuh manager in ossec.conf , wazuh dashboard tells that no agents were added to the manager.

how can I check the ip of wazuh manager and should I do anything else in order to setup hte agent?

in my cluster there are wazuh-manger-mastre and wazuh-mager-worker,what are the differnets between them?

Best regards

[Kasim Mustapha]

Hello Haidar Majd Merhej,

I'm sorry for not getting back to you sooner.

To check the IP of the Wazuh manager, you can use the 'kubectl get services' command in your Kubernetes environment. Look for the service associated with the Wazuh manager, and note down the Cluster IP. Make sure that the IP you set in the ossec.conf file of the Wazuh agent matches this Cluster IP. 

Additionally, ensure that the necessary network connectivity is established between the agent VM and the Wazuh manager. 

https://documentation.wazuh.com/current/user-manual/agent-enrollment/troubleshooting.html#testing-communication-with-the-wazuh-manager 

Regarding the differences between 'wazuh-manager-master' and 'wazuh-manager-worker' in your cluster, 'wazuh-manager-master' is responsible for managing the cluster and coordinating the worker nodes, while 'wazuh-manager-worker' performs the actual log analysis and monitoring tasks. 

https://documentation.wazuh.com/current/development/wazuh-cluster.html

Let us know if you need further assistance!

Regards,

Kasim