# Wazuh Server-Agent Communication ###### tags: `uscc` ![](https://i.imgur.com/lPFNyeh.png) 執行情況: ```bash= papd-Aspire-M7720# service wazuh-manager status ● wazuh-manager.service - Wazuh manager Loaded: loaded (/usr/lib/systemd/system/wazuh-manager.service; enabled; vendor preset: enabled) Active: active (running) since Mon 2021-02-08 15:02:10 CST; 2h 14min ago Tasks: 151 (limit: 19138) Memory: 222.5M CGroup: /system.slice/wazuh-manager.service ├─84615 /var/ossec/framework/python/bin/python3 /var/ossec/api/scripts/wazuh-apid.py ├─84654 /var/ossec/bin/ossec-authd ├─84670 /var/ossec/bin/wazuh-db ├─84693 /var/ossec/bin/ossec-execd ├─84707 /var/ossec/bin/ossec-analysisd ├─84801 /var/ossec/bin/ossec-syscheckd ├─84817 /var/ossec/bin/ossec-remoted ├─84847 /var/ossec/bin/ossec-logcollector ├─84862 /var/ossec/bin/ossec-monitord └─84874 /var/ossec/bin/wazuh-modulesd 2月 08 15:02:02 papd-Aspire-M7720 env[84558]: Started wazuh-db... 2月 08 15:02:03 papd-Aspire-M7720 env[84558]: Started ossec-execd... 2月 08 15:02:04 papd-Aspire-M7720 env[84558]: Started ossec-analysisd... 2月 08 15:02:05 papd-Aspire-M7720 env[84558]: Started ossec-syscheckd... 2月 08 15:02:06 papd-Aspire-M7720 env[84558]: Started ossec-remoted... 2月 08 15:02:06 papd-Aspire-M7720 env[84558]: Started ossec-logcollector... 2月 08 15:02:07 papd-Aspire-M7720 env[84558]: Started ossec-monitord... 2月 08 15:02:08 papd-Aspire-M7720 env[84558]: Started wazuh-modulesd... 2月 08 15:02:10 papd-Aspire-M7720 env[84558]: Completed. 2月 08 15:02:10 papd-Aspire-M7720 systemd[1]: Started Wazuh manager. ``` agent管理 ```bash= papd-Aspire-M7720# /var/ossec/bin/manage_agents -a 192.168.65.14 -n test **************************************** * Wazuh v4.0.4 Agent manager. * * The following options are available: * **************************************** (A)dd an agent (A). (E)xtract key for an agent (E). (L)ist already added agents (L). (R)emove an agent (R). (Q)uit. Choose your action: A,E,L,R or Q: - Adding a new agent (use '\q' to return to the main menu). Please provide the following: * A name for the new agent: * The IP Address of the new agent: Confirm adding it?(y/n): Agent added with ID 003. manage_agents: Exiting. ``` ==Agent:== ![](https://i.imgur.com/FLAU9y8.jpg) ```bash= ./agent_control -l Wazuh agent_control. List of available agents: ID: 000, Name: papd-Aspire-M7720 (server), IP: 127.0.0.1, Active/Local ID: 002, Name: localhost.localdomain, IP: any, Never connected ID: 003, Name: test, IP: 192.168.65.14, Never connected ID: 011, Name: localhost.localdomain, IP: any, Active List of agentless devices: ``` ```bash= papd-Aspire-M7720# /var/ossec/bin/manage_agents -e 003 Agent key information for '003' is: MDAzIHRlc3QgMTkyLjE2OC42NS4xNCA1ZDdmNWQyNzFkODY2OGI1ZjE1N2NkNWIzOGEwOGQ2Y2VmNDg2MDZiY2MyYjlmMGUwNDQyY2JhNGQ3ODg4Njg1 ``` ![](https://i.imgur.com/53svlRg.png)