Wazuh Manager Disconnection Timeout Attacker #9491
-
|
It looks like by default a Wazuh agent is considered "Disconnected" from the manager if it hasn't phoned home in 30 minutes. Is it possible to set the agents_disconnection_time in Security Onion or otherwise decrease this value? I don't see that option in ossec.conf. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
It looks like the So that option won't work since we use Wazuh 3.13: |
Beta Was this translation helpful? Give feedback.
It looks like the
agents_disconnection_timeoption was added in Wazuh 4.10:https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/global.html#agents-disconnection-time
So that option won't work since we use Wazuh 3.13:
https://docs.securityonion.net/en/2.3/wazuh.html#adding-agents