Zion Boggan zionboggan.com ↗

windows + linux agent enrollment helpers

b2222b0   Zion Boggan committed on Apr 2, 2026 (2 months ago)
scripts/enroll-agent.ps1 +34 -0
@@ -0,0 +1,34 @@
+[CmdletBinding()]
+param(
+ [Parameter(Mandatory = $true)]
+ [string]$Manager,
+
+ [string]$Group = "windows",
+
+ [string]$Version = "4.9.0-1",
+
+ [string]$AgentName = $env:COMPUTERNAME
+)
+
+$ErrorActionPreference = "Stop"
+
+$installer = "$env:TEMP\wazuh-agent-$Version.msi"
+$url = "https://packages.wazuh.com/4.x/windows/wazuh-agent-$Version.msi"
+
+Write-Host "Downloading Wazuh agent $Version"
+Invoke-WebRequest -Uri $url -OutFile $installer
+
+Write-Host "Installing and registering against $Manager (group $Group)"
+$arguments = @(
+ "/i", $installer,
+ "/q",
+ "WAZUH_MANAGER=$Manager",
+ "WAZUH_AGENT_GROUP=$Group",
+ "WAZUH_AGENT_NAME=$AgentName"
+)
+Start-Process msiexec.exe -ArgumentList $arguments -Wait
+
+Write-Host "Starting service"
+Start-Service -Name WazuhSvc
+
+Write-Host "Agent $AgentName enrolled. Confirm it appears under Agents in the dashboard."
scripts/enroll-agent.sh +26 -0
@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+: "${WAZUH_MANAGER:?set WAZUH_MANAGER to the manager IP}"
+WAZUH_AGENT_GROUP="${WAZUH_AGENT_GROUP:-linux}"
+WAZUH_VERSION="${WAZUH_VERSION:-4.9.0-1}"
+
+if ! command -v apt-get >/dev/null 2>&1; then
+ echo "this helper targets debian/ubuntu; install the rpm package manually elsewhere" >&2
+ exit 1
+fi
+
+curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | gpg --no-default-keyring \
+ --keyring gnupg-ring:/usr/share/keyrings/wazuh.gpg --import
+chmod 644 /usr/share/keyrings/wazuh.gpg
+echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main" \
+ > /etc/apt/sources.list.d/wazuh.list
+
+apt-get update
+WAZUH_MANAGER="${WAZUH_MANAGER}" WAZUH_AGENT_GROUP="${WAZUH_AGENT_GROUP}" \
+ apt-get install -y "wazuh-agent=${WAZUH_VERSION}"
+
+systemctl daemon-reload
+systemctl enable --now wazuh-agent
+
+echo "agent enrolled against ${WAZUH_MANAGER} in group ${WAZUH_AGENT_GROUP}"