https://github.com/k1LoW/wazuh-agent-debug

Wazuh agent binary for "Agent event queue is flooded" debug
https://github.com/k1LoW/wazuh-agent-debug

wazuh-agent

Last synced: 22 days ago
JSON representation

Wazuh agent binary for "Agent event queue is flooded" debug

• Host: GitHub
• URL: https://github.com/k1LoW/wazuh-agent-debug
• Owner: k1LoW
• Created: 2021-01-22T00:57:15.000Z (almost 4 years ago)
• Default Branch: main
• Last Pushed: 2021-01-22T06:31:31.000Z (almost 4 years ago)
• Last Synced: 2024-11-09T12:52:00.568Z (about 1 month ago)
• Topics: wazuh-agent
• Language: Shell
• Homepage:
• Size: 5.86 KB
• Stars: 3
• Watchers: 3
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - k1LoW/wazuh-agent-debug - Wazuh agent binary for "Agent event queue is flooded" debug (Shell)

README

        
# wazuh-agent-debug

Wazuh agent binary for "Agent event queue is flooded" debug

## Usage (Ubuntu)

1. Check wazuh-agent version ( `dpkg -l | grep wazuh-agent` )

2. Stop wazuh-agent.service ( `systemctl stop wazuh-agent.service` )

3. Replace `/var/ossec/bin/ossec-agentd` to [releases binary](https://github.com/k1LoW/wazuh-debug/releases)

4. Add `agent.debug=2` to `/var/ossec/etc/local_internal_options.conf`

5. Start wazuh-agent.service ( `systemctl start wazuh-agent.service` )

6. Check `/var/ossec/logs/ossec.log` ( `tail -F /var/ossec/logs/ossec.log | grep 'Send messages to buffer'` )