Code Books

• Wazuh
• Upgrade Wazuh Agents
• Ansible

Wazuh

Upgrade Wazuh Agents

1. First we need to ssh into Wazuh container

sudo docker exec -it single-node-wazuh.manager-1 /bin/bash

2. Next we run

/var/ossec/bin/agent_upgrade -l

to check which agents can be updated.

 

3. RUn the next command to update the agent/agents

/var/ossec/bin/agent_upgrade -a IDNUMBERHERE

 

Ansible

To copy the ansible user ssh key to a VM or container:

ssh-copy-id -i ~/.ssh/ansible.pub -p PORTOFSERVER thesabear@IPOFSERVER
ssh-copy-id -i ~/.ssh/ansible.pub -p 10018 thesabear@10.27.27.18

 

To run a manual update&upgrade of all machines in inventory

ansible all -m apt -a "upgrade=dist" --become --ask-become-pass