diff --git a/security/wazuh-agent/Makefile b/security/wazuh-agent/Makefile
index c9f4d4953..d7443b529 100644
--- a/security/wazuh-agent/Makefile
+++ b/security/wazuh-agent/Makefile
@@ -1,6 +1,6 @@
 PLUGIN_NAME=		wazuh-agent
 PLUGIN_VERSION=		1.2
-PLUGIN_REVISION=	1
+PLUGIN_REVISION=	2
 PLUGIN_COMMENT=		Agent for the open source security platform Wazuh
 PLUGIN_DEPENDS=		wazuh-agent
 PLUGIN_MAINTAINER=	ad@opnsense.org
diff --git a/security/wazuh-agent/src/opnsense/scripts/wazuh/setup.php b/security/wazuh-agent/src/opnsense/scripts/wazuh/setup.php
index edeebf971..4b78ab5e0 100755
--- a/security/wazuh-agent/src/opnsense/scripts/wazuh/setup.php
+++ b/security/wazuh-agent/src/opnsense/scripts/wazuh/setup.php
@@ -56,7 +56,11 @@ if (!empty((string)$mdl->auth->password)) {
  * Temporary solution to link log files so we can view at least the last items in the file easily for debug purposes
  * It looks like ossec is not able to log to syslog directly, which means our log files live outside our normal bounds
  **/
-mkdir("/var/log/wazuhagent/ossec/", 0700, true);
-mkdir("/var/log/wazuhagent/activeresponses/", 0700, true);
+if (!is_dir("/var/log/wazuhagent/ossec/")) {
+    mkdir("/var/log/wazuhagent/ossec/", 0700, true);
+}
+if (!is_dir("/var/log/wazuhagent/activeresponses/")) {
+    mkdir("/var/log/wazuhagent/activeresponses/", 0700, true);
+}
 @symlink("/var/ossec/logs/ossec.log", "/var/log/wazuhagent/ossec/ossec_99991231.log");
 @symlink("/var/ossec/logs/active-responses.log", "/var/log/wazuhagent/activeresponses/activeresponses_99991231.log");