Internal Configuration File

[Kostas Apostolopoulos]

Hello,

I want to configure the logcollector.max_lines value on an agent node, but I don't have access to it.

The documentation gives me a file path /var/ossec/etc/local_internal_options.conf

I have only admin access to the Wazuh UI (cloud installation).

Is there any way to configure that value from the UI or it can be configured by connecting to the agent node?

[Andres Micalizzi]

Hi,

Currently, there is no direct way to modify the local_internal_options.conf file from the WUI, you can use it to modify the agent's ossec.conf file for general configuration.

You will need to access the agent to modify the local_internal_options file.

I hope this clears your question.

Cheers,

Andrés

[Kostas Apostolopoulos]

Hello,

Thank you for the explanation.