Multiple commands using command wodle

427 views
Skip to first unread message

Atul Chadha

unread,
Feb 16, 2023, 11:47:29 AM2/16/23
to Wazuh mailing list
I am trying to write my first command wodle and need some help in setting up multiple commands.

Does anyone has a syntax for multiple commands with different run timings  ?

I am running version wazuh-manager-4.3.5-1.x86_64

Nicolas Stefani

unread,
Feb 16, 2023, 3:31:21 PM2/16/23
to Atul Chadha, Wazuh mailing list
Hi Atul
Thanks for using Wazuh!

I will be trying to help you with your query. To be specific, what wodle type are you talking about?

Regards

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/7bb7f2c7-b1df-42f5-81cc-fe1f82289189n%40googlegroups.com.


--
Wazuh Nicolás Stefani
Software Engineer

Atul Chadha

unread,
Feb 16, 2023, 8:47:43 PM2/16/23
to Wazuh mailing list
I am trying to run commands from Wazuh server to set of client machines, i have setup the below in
/var/ossec/etc/shared/default/agent.conf file on Wazuh Server and clients have the script on their side, it works beautifully. I am now trying to add more command / scripts with different run times on the Server ( 30 min for one script , 1 hour for another ) and not sure of the syntax.


<agent_config>
<wodle name="command">
  <disabled>no</disabled>
  <tag>wzh-command-audit</tag>
  <command>/bin/bash /var/ossec/wodles/custom-commands/wzh-command-wodle-audit-cleanup.sh</command>
  <interval>10m</interval>
  <ignore_output>no</ignore_output>
  <run_on_start>yes</run_on_start>
  <timeout>0</timeout>
  <verify_sha256>XXXXXX</verify_sha256>
</wodle>
</agent_config>

Nicolas Stefani

unread,
Feb 17, 2023, 8:29:37 AM2/17/23
to Atul Chadha, Wazuh mailing list
Sorry, but isn't possible to get multiple <wodle name="command">...</wodle> sections in the same configuration, with different intervals.

Atul Chadha

unread,
Feb 18, 2023, 12:36:01 AM2/18/23
to Wazuh mailing list
Thank you Nicolas for the clarification.
Reply all
Reply to author
Forward
0 new messages