Use FQDN for Wazuh Agent Host Identification

[Sidra Siddique]

Hi Team,

Is it possible to configure the Wazuh agent to display the Fully Qualified Domain Name (FQDN) instead of just the hostname?  because situation may arise where two systems share the same hostname, using the FQDN can provide better identification and avoid confusion.

Looking forward to your response.

Regards,

Sidra

[Julio Cesar Biset]

Hi Sidra.

In the following Wazuh documentation (https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/syslog-output.html#use-fqdn) there is a setting to toggle between the full or truncated hostname configured on the server, but I think that is not the case for you.
It would be best to configure the agent name in case you have not configured it to better identify each one. I leave you a link to a thread where it seems to be the same case as yours: https://groups.google.com/g/wazuh/c/Pj2kwx5uhXY
I hope it helps you, otherwise don't hesitate to continue consulting.

Regards

[Sidra Siddique]

Hi team,

Have you had chance to look over this concern? If you could please respond it would be a great help.

Thanks,

Sidra

--
You received this message because you are subscribed to the Google Groups "Wazuh | Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/d8a8aca2-53ae-4de8-b4c2-e48c35c3d199n%40googlegroups.com.

[Julio Cesar Biset]

Hi Sidra.
I don't know if you have seen the previous response email. In any case, in summary I recommended you see this thread (https://groups.google.com/g/wazuh/c/Pj2kwx5uhXY) that presented a similar case.

Regards.