want to replcae client connection port from 1514 to 443 ?

94 views
Skip to first unread message

Priyanka chauhan

unread,
Jun 27, 2023, 6:30:55 AM6/27/23
to Wazuh mailing list
It is possible to change 1514 port or console at other port like 443? If it is possible so plz tell me me where I can  do changes in configuration of wazuh server and agent.

Thanks in advance
Regards
Priyanka

Sebastian Falcone

unread,
Jun 27, 2023, 6:58:31 AM6/27/23
to Wazuh mailing list
Hello, Priyanka. How are you doing?

To better understand what you want to do.
Port 1514 is used for the agent connection service to the manager, would you like to change that port?

If your answer is yes, you must change the "remote" section on the ossec.conf files for the manager and agent. Here is the associated documentation

I wouldn't recommend changing it to 443 is usually used for HTTPS connections (We use it for the dashboard in this case). Here is a list of the commonly used ports and here is the default mapping for Wazuh

Sebastian Falcone

unread,
Jun 28, 2023, 9:07:18 AM6/28/23
to Wazuh mailing list
Hello Priyanka. Please use the reply all button in order to keep the conversation public

I have to change port 1514 to 443 for agent communication and 443 to 8443 for wazuh management page,.
> First I have to change in ossec.conf for agent communication. for 443 port to 8443 where i have to change for wazuh UI?

Which type of installation did you perform?

Priyanka chauhan

unread,
Jun 28, 2023, 11:11:16 AM6/28/23
to Sebastian Falcone, Wazuh mailing list
I have upgraded wazuh 4.4 version for opendistroelastic search 

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/7e26b536-65a5-401e-981d-02208e033f74n%40googlegroups.com.

Priyanka chauhan

unread,
Jun 28, 2023, 11:12:43 AM6/28/23
to Sebastian Falcone, Wazuh mailing list
Wazuh 4.4 Opendistroforelasticsearch

Sebastian Falcone

unread,
Jun 28, 2023, 12:47:33 PM6/28/23
to Wazuh mailing list
In order to redirect the agents to a new port you need to change on you /var/wazuh/etc/ossec.conf file the following section:
  <remote>
    <connection>secure</connection>
    <port>1514</port>
    <protocol>tcp</protocol>
    <queue_size>131072</queue_size>
  </remote>

See that this connection is secure (it doesn't need to be running on port 443)

To change the port for the dashboard you have to modify the /etc/wazuh-dashboard/opensearch_dashboards.yml , there is a port variable you can change to the desire one.

After those changes restart the dashboard and manager
Reply all
Reply to author
Forward
0 new messages