diff --git a/include/tests_logging b/include/tests_logging
index 04bee67d..d560da64 100644
--- a/include/tests_logging
+++ b/include/tests_logging
@@ -28,6 +28,7 @@
METALOG_RUNNING=0
RFC3195D_RUNNING=0
RSYSLOG_RUNNING=0
+ WAZUH_AGENT_RUNNING=0
SOLARIS_LOGHOST=""
SOLARIS_LOGHOST_FOUND=0
SOLARIS_LOGHOST_LOCALHOST=0
@@ -220,6 +221,23 @@
fi
#
#################################################################################
+#
+ # Test : LOGG-2144
+ # Description : Check for wazuh-agent presence on Linux systems
+ Register --test-no LOGG-2144 --os Linux --weight L --network NO --category security --description "Checking wazuh-agent"
+ if [ ${SKIPTEST} -eq 0 ]; then
+ LogText "Result: Searching for wazuh-agent instances in the process list"
+ if IsRunning "wazuh-agent"; then
+ LogText "Result: Found wazuh-agent in process list"
+ Display --indent 4 --text "- Checking wazuh-agent status" --result "${STATUS_FOUND}" --color GREEN
+ WAZUH_AGENT_RUNNING=1
+ else
+ LogText "Result: wazuh-agent NOT found in process list"
+ Display --indent 4 --text "- Checking wazuh-agent daemon status" --result "${STATUS_NOT_FOUND}" --color WHITE
+ fi
+ fi
+#
+#################################################################################
#
# Test : LOGG-2146
# Description : Check for logrotate (/etc/logrotate.conf and logrotate.d)
@@ -446,6 +464,21 @@
fi
fi
+ # Test wazuh-agent configuration for syslog configuration
+ if [ ${WAZUH_AGENT_RUNNING} ]; then
+ WAZUH_AGENT_CONF="/var/ossec/etc/ossec.conf"
+ fi
+
+ if [ -f ${WAZUH_AGENT_CONF} ]; then
+ LogText "Test: Checking Wazuh agent configuration for remote syslog forwarding"
+ FIND=$(${EGREPBINARY} '