Provides the WazuhInternalAgentConfiguration which allows to parse the agent section of the Wazuh internal configuration.

class WazuhInternalAgentConfiguration(**kwargs)#

Bases: object

Object representation of the wazuh agent’s internal option agent section.

Wazuh reference: https://documentation.wazuh.com/current/user-manual/reference/internal-options.html#agent

debug: int | None = None#

The debug log level configuration of the wazuh agent.

0: No debug output

1: Standard debug output

2: Verbose debug output

min_eps: int | None = None#

The minimum permitted amount of events that may be sent to the manager within a second.

normal_level: int | None = None#

Threshold in percent of occupied space in the agent’s event buffer after which a the agent will return to it’s normal state.

remote_conf_enabled: bool = True#

Indicates whether the agent allows or refuses remote configuration.

state_interval: int | None = None#

Frequency in seconds in which the agent will update it’s status file.

timeout: int | None = None#

The maximum amount of time in seconds the agent will wait for a response from the TCP client socket.

tolerance: int | None = None#

Number of seconds the agent’s event buffer must remain full before triggering a flood alert.

warn_level: int | None = None#

Threshold in percent of occupied space in the agent’s event buffer after which a warning alert will be triggered.