https://github.com/k1low/wazuh-agent-debug
Wazuh agent binary for "Agent event queue is flooded" debug
https://github.com/k1low/wazuh-agent-debug
wazuh-agent
Last synced: 3 months ago
JSON representation
Wazuh agent binary for "Agent event queue is flooded" debug
- Host: GitHub
- URL: https://github.com/k1low/wazuh-agent-debug
- Owner: k1LoW
- Created: 2021-01-22T00:57:15.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2021-01-22T06:31:31.000Z (over 4 years ago)
- Last Synced: 2025-01-04T14:25:14.542Z (5 months ago)
- Topics: wazuh-agent
- Language: Shell
- Homepage:
- Size: 5.86 KB
- Stars: 3
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# wazuh-agent-debug
Wazuh agent binary for "Agent event queue is flooded" debug
## Usage (Ubuntu)
1. Check wazuh-agent version ( `dpkg -l | grep wazuh-agent` )
2. Stop wazuh-agent.service ( `systemctl stop wazuh-agent.service` )
3. Replace `/var/ossec/bin/ossec-agentd` to [releases binary](https://github.com/k1LoW/wazuh-debug/releases)
4. Add `agent.debug=2` to `/var/ossec/etc/local_internal_options.conf`
5. Start wazuh-agent.service ( `systemctl start wazuh-agent.service` )
6. Check `/var/ossec/logs/ossec.log` ( `tail -F /var/ossec/logs/ossec.log | grep 'Send messages to buffer'` )