Research and Integrate Wazuh Agent Upgrade Functionality via Dashboard Upgrade Button

### 📋 **Description**

Investigate how the **Wazuh Agent upgrade process** works when triggered through the **Wazuh Dashboard “Upgrade” button**, understand **why it might fail**, and determine how to **replicate or integrate this functionality** into our custom implementation.

Currently, attempts to upgrade agents via the dashboard button appear to fail silently or incompletely. We need to:

* Identify the underlying mechanism the dashboard uses to trigger upgrades.
* Understand possible failure points (permissions, connectivity, configuration, version mismatches, etc.).
* Document steps to reproduce the issue.
* Propose and design a custom integration approach that replicates or improves the upgrade process programmatically.

---

### 🎯 **Goals / Acceptance Criteria**

* [x] Research how the Wazuh Dashboard triggers agent upgrades (API calls, backend scripts, etc.).
* [ ] Identify dependencies or permissions required for the upgrade to succeed.
* [ ] Document potential reasons why the dashboard “Upgrade” button might fail (e.g., agent offline, Wazuh Manager configuration, endpoint OS compatibility, etc.).
* [ ] Provide a working proof of concept or API script that can trigger an agent upgrade.
* [ ] Add documentation on configuration or environment requirements.

---

### 🧠 **Research Notes / Resources**

* Wazuh documentation on [[Agent upgrade management](https://documentation.wazuh.com/current/user-manual/agents/agent-upgrade.html)](https://documentation.wazuh.com/current/user-manual/agents/agent-upgrade.html)
* Wazuh API reference: `PUT /agents/upgrade`
* Logs to check: `/var/ossec/logs/api.log`, `/var/ossec/logs/ossec.log`

---

### 🐛 **Possible Failure Causes to Investigate**

* Missing or incorrect API credentials between dashboard and Wazuh manager.
* Agents running older versions that do not support in-place upgrades.
* Endpoint OS or package manager issues (e.g., yum/apt failures).
* Network connectivity or firewall restrictions.
* Misconfigured `wazuh-manager` or `wazuh-api` permissions.
* SSL/TLS certificate or token mismatches.

---

### 🧾 **Deliverables**

1. Research findings document (summary + root cause analysis).
2. Prototype or script demonstrating custom upgrade trigger.