Centralized agent configuration

[Todor Dimitrov]

Hello, 

I have a few questions about the centralized agent configuration. I was following this article  https://documentation.wazuh.com/current/user-manual/reference/centralized-configuration.html but i don't understand where exactly do the wodle commands go inside the agent.conf file. Would anyone be able to give me an example of an agent.conf file so i can get an idea where goes what? Also do i have to create separate configurations for Win10 and Win11?

Regards, 

T.D.

[Henadence Anyam]

Hi Todor Dimitrov,

As you know, centralized configuration is used to remotely configure Wazuh agents from the Wazuh server.

Centralized configs go within the <agent_config></agent_config> options.

To effectively utilize centralized configuration, you’ll need to create and manage agent groups. By default, all Wazuh agents belong to a group called default.
So, to manage all the Wazuh agents centrally, the configuration file is located at /var/ossec/etc/shared/default/agent.conf.

Depending on the type of configuration you want, both Windows endpoints can receive the same or different configs.
Kindly take a look at the Wazuh agent groups and centralized configuration post which provides example configs.