Provides the WazuhWodleSyscollectorConfiguration which allows to parse the syscollector section of the Wazuh local configuration (ossec.conf).

class WazuhWodleSyscollectorConfiguration(**kwargs)

Bases: object

Object representation of an agent’s syscollector wodle configuration.

Wazuh reference: https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/wodle-syscollector.html

browser_extensions: bool = True

Indicates whether the browser extension scan is enabled or not.

disabled: bool = False

Disable the Syscollector wodle.

groups: bool = True

Indicates whether the user account group scan is enabled or not.

hardware: bool = True

Indicates whether the hardware scans are enabled or not.

hotfixes: bool = True

Indicates whether the hotfix scan is enabled or not.

interval: int | None

Interval in seconds in which the system will be scanned.

network: bool = True

Indicates whether the network scan is enabled or not.

os: bool = True

Indicates whether the OS scan is enabled or not.

packages: bool = True

Indicates whether the package scan is enabled or not.

ports: bool = True

Indicates whether the port scan is enabled or not.

processes: bool = True

Indicates whether the process scan is enabled or not.

scan_on_start: bool = True

Run a system scan immediately when the service is started.

services: bool = True

Indicates whether the service scan is enabled or not.

synchronization: WazuhWodleSyscollectorSynchronizationConfiguration | None

The database synchronization configuration.

users: bool = True

Indicates whether the user account information scan is enabled or not.

On this page