WAZUH local_internal_options.conf

[saman javed]

Hi, 

i want to set remote commands in shared agent configurations. do i have to add below line in each agent manually? 

1. Configure the agent in the agent's local_internal_options.conf file to accept remote commands from the manager.

   # Logcollector - Whether or not to accept remote commands from the manager logcollector.remote_commands=1

[Nicolas Alejandro Bertoldo]

Hi Saman,

Thanks for using Wazuh!
Exactly. The remote commands must be enabled from the agent side because by default the Wazuh manager does not have the capability to run arbitrary code unless it is explicitly enabled on the agents side.

Let me knoy if you have any question.
Regards

[saman javed]

Hi,

My question is if i add logcollector.remote_commands=1 

to /var/ossec/etc/local_internal_options.conf 

On my wazuh server will this enable remote command on agents ? 

Or do i have to manually add this command ok. Each agents’ local_internal_options.conf

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/d9f87b97-ed93-4e6e-8476-6335c81089a2n%40googlegroups.com.

[Nicolas Alejandro Bertoldo]

Saman,

Yes, you have to set the logcollector.remote_commands in the local_internal_options.conf file on each agent.
Please see the next links:

• Configure Wazuh agents to accept remote commands from the manager
• Scheduling remote commands for Wazuh agents

Regards