wazuh_list_agents
List Wazuh agents with status, OS, version, and last connection. Filter by status, search by name or IP, and paginate results.
Instructions
List all Wazuh agents with their status, OS, version, and last connection. Filter by status ('active', 'disconnected', 'never_connected'), search by name or IP, and control pagination.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| status | No | Filter by connection status: 'active', 'disconnected', 'never_connected', 'pending' | |
| older_than | No | Show agents not seen in this duration (e.g., '1d', '4h', '30m') | |
| search | No | Search by agent name, IP, or ID | |
| sort | No | Sort field, prefix with '-' for descending (e.g., '-last_keepalive') | |
| limit | No | Maximum agents to return (1-500) | |
| offset | No | Pagination offset |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |