security/wazuh-agent 4.14.9 FreeBSD

Security tool to monitor and check logs and intrusions (agent)

System: FreeBSD
Repository: FreeBSD ports
Maintainer: [email protected]
Last update: 2026-10-21
Commit: 47b0693c6d
License: GPLv2
Categories: security
Package size: 5747.8 KiB, 40869.0 KiB installed

Description

The Wazuh agent runs on the hosts that you want to monitor. It is multi-platform and provides the following capabilities:

Log and data collection
File integrity monitoring
Rootkit and malware detection
Security policy monitoring.
Configuration assessments
Software inventory

In addition, it communicates with the Wazuh manager, sending data in near real-time through an encrypted and authenticated channel.

Install

Binary package:

pkg install wazuh-agent

From the ports tree:

cd /usr/ports/security/wazuh-agent/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	wazuh-agent>0:security/wazuh-agent

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repository	aarch64	amd64	armv6	armv7	i386
FreeBSD:14:latest	4.14.8	4.14.8	4.3.10_1	4.12.0	4.14.8
FreeBSD:14:quarterly	4.14.8	4.14.8	n/a	4.12.0	4.14.8
FreeBSD:15:latest	4.14.8	4.14.8	n/a	4.12.0	4.12.0
FreeBSD:15:quarterly	4.14.8	4.14.8	n/a	n/a	n/a
FreeBSD:16:latest	4.14.8	4.14.8	n/a	n/a	n/a
FreeBSD:16:quarterly	n/a	n/a	n/a	n/a	n/a

Dependencies

As this port's Makefile names them.

Library 2

libnghttp2.so : www/libnghttp2
libepoll-shim.so : devel/libepoll-shim

The full lists below include those, and their dependencies in turn.

Build dependencies 21

Run dependencies 10

No port depends on this one.

Configuration

Options name: security_wazuh

Option

Default

Description

INOTIFY

Kevent based real time monitoring

ZEROMQ

off

ZeroMQ support

USES: cmake:indirect cpe gmake perl5 readline shebangfix sqlite:3 uidfix
Service scripts: wazuh-agent
Conflicts with: ossec-* wazuh-manager

Message after installing

Wazuh Agent was installed

1) Copy /etc/locatime to /var/ossec/etc directory

   # cp /etc/localtime /var/ossec/etc

2) You must edit /var/ossec/etc/ossec.conf.sample for your setup and rename/copy
   it to ossec.conf

   Take a look wazuh configuration at the following url:

   https://documentation.wazuh.com/current/user-manual/index.html

3) Move /var/ossec/etc/client.keys.sample to /var/ossec/etc/client.keys. This
   file is used to store agent credentials

   # mv /var/ossec/etc/client.keys.sample /var/ossec/etc/client.keys

4) You can find additional useful files installed at

  # /var/ossec/packages_files/agent_installation_scripts

5) FreeBSD SCA files are installed by default to the following directory:

   # /var/ossec/packages_files/agent_installation_scripts/sca/freebsd

   For more information about FreeBSD SCA updates take a look at:

   https://github.com/alonsobsd/wazuh-freebsd

6) The sysctl 'kern.hostuuid' is used as a serial number. If you are in a jail,
    you should have at least started the 'hostid' rc script to uniquely identify
    this device.

7) Add Wazuh agent to /etc/rc.conf

  # sysrc wazuh_agent_enable="YES"

  or

  # service wazuh-agent enable

8) Start Wazuh agent

  # service wazuh-agent start

8) Enjoy it ;)

Files

pkg-plist 646

@mode 750
@owner root
@group wazuh
/var/ossec/VERSION.json
/var/ossec/active-response/bin/default-firewall-drop
/var/ossec/active-response/bin/disable-account
/var/ossec/active-response/bin/firewall-drop
/var/ossec/active-response/bin/firewalld-drop
/var/ossec/active-response/bin/host-deny
/var/ossec/active-response/bin/ip-customblock
/var/ossec/active-response/bin/ipfw
/var/ossec/active-response/bin/kaspersky
/var/ossec/active-response/bin/kaspersky.py
/var/ossec/active-response/bin/npf
/var/ossec/active-response/bin/pf
/var/ossec/active-response/bin/restart-wazuh
/var/ossec/active-response/bin/restart.sh
/var/ossec/active-response/bin/route-null
/var/ossec/active-response/bin/wazuh-slack
@mode 750
@owner root
@group wazuh
/var/ossec/agentless/main.exp
/var/ossec/agentless/register_host.sh
/var/ossec/agentless/ssh.exp
/var/ossec/agentless/ssh_asa-fwsmconfig_diff
/var/ossec/agentless/ssh_foundry_diff
/var/ossec/agentless/ssh_generic_diff
/var/ossec/agentless/ssh_integrity_check_bsd
/var/ossec/agentless/ssh_integrity_check_linux
/var/ossec/agentless/ssh_nopass.exp
/var/ossec/agentless/ssh_pixconfig_diff
/var/ossec/agentless/sshlogin.exp
/var/ossec/agentless/su.exp
/var/ossec/bin/agent-auth
/var/ossec/bin/manage_agents
/var/ossec/bin/wazuh-agentd
/var/ossec/bin/wazuh-control
/var/ossec/bin/wazuh-execd
/var/ossec/bin/wazuh-logcollector
/var/ossec/bin/wazuh-modulesd
/var/ossec/bin/wazuh-syscheckd
@mode 640
@owner wazuh
@group wazuh
@sample /var/ossec/etc/client.keys.sample
/var/ossec/etc/internal_options.conf
@sample /var/ossec/etc/local_internal_options.conf.sample
/var/ossec/etc/localtime
@mode 660
@owner root
@group wazuh
@sample /var/ossec/etc/ossec.conf.sample
/var/ossec/etc/shared/cis_apache2224_rcl.txt
/var/ossec/etc/shared/cis_debian_linux_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_community_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
/var/ossec/etc/shared/cis_rhel5_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel6_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel7_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel_linux_rcl.txt
/var/ossec/etc/shared/cis_sles11_linux_rcl.txt
/var/ossec/etc/shared/cis_sles12_linux_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
/var/ossec/etc/shared/default/cis_apache2224_rcl.txt
/var/ossec/etc/shared/default/cis_debian_linux_rcl.txt
/var/ossec/etc/shared/default/cis_mysql5-6_community_rcl.txt
/var/ossec/etc/shared/default/cis_mysql5-6_enterprise_rcl.txt
/var/ossec/etc/shared/default/cis_rhel5_linux_rcl.txt
/var/ossec/etc/shared/default/cis_rhel6_linux_rcl.txt
/var/ossec/etc/shared/default/cis_rhel7_linux_rcl.txt
/var/ossec/etc/shared/default/cis_rhel_linux_rcl.txt
/var/ossec/etc/shared/default/cis_sles11_linux_rcl.txt
/var/ossec/etc/shared/default/cis_sles12_linux_rcl.txt
/var/ossec/etc/shared/default/cis_win2012r2_domainL1_rcl.txt
/var/ossec/etc/shared/default/cis_win2012r2_domainL2_rcl.txt
/var/ossec/etc/shared/default/cis_win2012r2_memberL1_rcl.txt
/var/ossec/etc/shared/default/cis_win2012r2_memberL2_rcl.txt
/var/ossec/etc/shared/default/rootkit_files.txt
/var/ossec/etc/shared/default/rootkit_trojans.txt
/var/ossec/etc/shared/default/system_audit_rcl.txt
/var/ossec/etc/shared/default/system_audit_ssh.txt
/var/ossec/etc/shared/default/win_applications_rcl.txt
/var/ossec/etc/shared/default/win_audit_rcl.txt
/var/ossec/etc/shared/default/win_malware_rcl.txt
/var/ossec/etc/shared/rootkit_files.txt
/var/ossec/etc/shared/rootkit_trojans.txt
/var/ossec/etc/shared/system_audit_rcl.txt
/var/ossec/etc/shared/system_audit_ssh.txt
/var/ossec/etc/shared/win_applications_rcl.txt
/var/ossec/etc/shared/win_audit_rcl.txt
/var/ossec/etc/shared/win_malware_rcl.txt
/var/ossec/etc/wpk_root.pem
@mode 750
@owner root
@group wazuh
/var/ossec/lib/libdbsync.so

The first 100 are listed.

distinfo 19

File

Size

SHA256

wazuh-4.14.9/cJSON.tar.gz

27920

da809f70b7d03ac529ae6223d4390bfa26cd29f8c32c8e8b3b631efa1667892d

wazuh-4.14.9/curl.tar.gz

4.537356e+06

30cf7142e4282718ceb237e17b5cbf75afcd7c9f3880a039c5efea62db094709

wazuh-4.14.9/libdb.tar.gz

3.87499e+06

7e9c44e8c7fdb186ff521a8d085b1bfa634d342dcc777ecea1fbf9a98ab5dc5e

wazuh-4.14.9/libffi.tar.gz

964576

0e971f64bacc22094e89f034bba075b40ecc2c2c2900eecd7ae85815fd6c9f69

wazuh-4.14.9/libyaml.tar.gz

424656

35daad608b372d5ce099f738c0f21bfcc03d6920d92f448386c584e664f1376a

wazuh-4.14.9/openssl.tar.gz

5.3793192e+07

0386fe3a0bf48bae2ca4d1742a53df9a8fcb1b73583ba22e8f8a7ddfa1375cd9

wazuh-4.14.9/procps.tar.gz

55897

221f395e29d1bdbe4bacc9db39602eee0bae685a935437be0d7feb42e3192d07

wazuh-4.14.9/sqlite.tar.gz

2.56487e+06

a81bff30bb4affd1b06a4983ff88ef827b4abaea3191b39aff7edb28d1ddd003

wazuh-4.14.9/zlib.tar.gz

1.593304e+06

b59d38149f0c29ec54d2766611ebc5a51a032bf9717e39a9af00fb6cb8532b8b

wazuh-4.14.9/audit-userspace.tar.gz

1.68282e+06

e82a32e5edf93b055160e14bc97f41dead39287925851dc80a7638e2d4d30434

wazuh-4.14.9/msgpack.tar.gz

591294

06d63bcf32896cd0af5480c401134b1ad1c166fd84ebe5b486e792101ee854e2

wazuh-4.14.9/bzip2.tar.gz

71277

27688ee0316a64b39e511b2c224070cad97c394a5f711f9d055fc1809d895bcd

wazuh-4.14.9/nlohmann.tar.gz

141576

6e304c0942ac65f76f012a0ec64dde90e00273b6cc5a498b37cfdd16155e08b0

wazuh-4.14.9/googletest.tar.gz

885874

8c1e8a0a7f221c2125e99e6acb709da2ba472476b4d057c58de504bebf38d417

wazuh-4.14.9/libpcre2.tar.gz

1.329651e+06

5a80d654d7d14b3db9fa3a49d7bf44a498683b46784a88cec514a8b194767b92

wazuh-4.14.9/libplist.tar.gz

1.520623e+06

88278d4bdfc1bd6a3a1a55a4f3d933683d2732ba09cf7a749fe8ec8eec406e3c

wazuh-4.14.9/libarchive.tar.gz

2.360242e+06

540ff4a55defa75778a2c40567a830648ce5367b8aea123366874d96b734ef80

wazuh-4.14.9/popt.tar.gz

891309

d6880a06622ca32dc4aa39ad5dcf7bef2faa81bd931afbe64ba434ad8fee1daa

wazuh-4.14.9/alonsobsd-wazuh-freebsd-v4.14.9-d7a31169cf0afd646db38408dd56d5148090aba0_GH0.tar.gz

2.0486888e+07

2c92b1bb96df70f27f899f856e6e7efb252d23f1433a04afea48f4fb0696e7b9

Master sites 1

https://packages.wazuh.com/deps/55/libraries/sources/:wazuh_sources

Commit history 5

Date Commit Credits Log message

2026-10-21

47b0693c6d

Jose Alonso Cardenas Marquez

security/wazuh*: update to 4.14.9

- Update cpython bundle to 3.11.17 - Remove obsolete patch file - Use PYTHON_DISTVERSION for avoid temporarily pkg-plist issues when system python is updated. The best is keep system python and bundle python with the same version. ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-14-9.html PR: 299490

2026-09-28

8801f12993

Jose Alonso Cardenas Marquez

security/wazuh-*: Update to 4.14.8

ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-14-8.html

2026-08-23

2341115f80

Jose Alonso Cardenas Marquez

security/wazuh-*: Update to 4.14.7

ChangeLog: https://documentation.wazuh.com/current/release-notes/release-4-14-7.html

2026-07-11

ffbf7ab241

Jose Alonso Cardenas Marquez

security/wazuh-*: Update to 4.14.6

ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-14-6.html

2026-07-04

ef6b0e1a5f

Muhammad Moinur Rahman

security/wazuh-agent: Remove non-default option PRELUDE

prelude has been defunct for some times and I have marked it deprecated. PR: 296320 Approved by: acm