From 820526f337ffbebf01288cee0863b0ae45c7749c Mon Sep 17 00:00:00 2001
From: Michael <m.muenz@gmail.com>
Date: Wed, 31 Jul 2024 08:25:30 +0200
Subject: [PATCH] Update wazuh-agent.rst (#582)

---
 source/manual/wazuh-agent.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/source/manual/wazuh-agent.rst b/source/manual/wazuh-agent.rst
index dd277280..c8ebd475 100644
--- a/source/manual/wazuh-agent.rst
+++ b/source/manual/wazuh-agent.rst
@@ -115,7 +115,7 @@ To use this action, you need to add some configuration in the manager, starting
     </command>
   </ossec_config>
 
-After which you can use it in active-response rules, like this:
+After which you can use it in active-response rules, like this (adjust agent id):
 
 .. code-block:: xml
   :linenos:
@@ -127,7 +127,7 @@ After which you can use it in active-response rules, like this:
       <command>opnsense-fw</command>
       <location>defined-agent</location>
       <agent_id>001</agent_id>
-      <rules_id>100201</rules_id>
+      <rules_id>87702</rules_id>
       <timeout>180</timeout>
     </active-response>
   </ossec_config>