You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: source/_templates/installations/indexer/common/configure_indexer_nodes.rst
+6-7Lines changed: 6 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,12 +1,11 @@
1
1
.. Copyright (C) 2015, Wazuh, Inc.
2
2
3
+
#. Edit ``/etc/wazuh-indexer/opensearch.yml`` and replace the following values:
3
4
4
-
#. Edit the ``/etc/wazuh-indexer/opensearch.yml`` configuration file and replace the following values:
5
5
6
-
7
-
#. ``network.host``: Sets the address of this node for both HTTP and transport traffic. The node will bind to this address and use it as its publish address. Accepts an IP address or a hostname.
8
-
9
-
Use the same node address set in ``config.yml`` to create the SSL certificates.
6
+
#. ``network.host``: Sets the address of this node for both HTTP and transport traffic. The node will bind to this address and use it as its publish address. Accepts an IP address or a hostname.
7
+
8
+
Use the same node address set in ``config.yml`` to create the SSL certificates.
10
9
11
10
#. ``node.name``: Name of the Wazuh indexer node as defined in the ``config.yml`` file. For example, ``node-1``.
12
11
@@ -19,15 +18,15 @@
19
18
- "node-2"
20
19
- "node-3"
21
20
22
-
#. ``discovery.seed_hosts:`` List of the addresses of the master-eligible nodes. Each element can be either an IP address or a hostname. You may leave this setting commented if you are configuring the Wazuh indexer as a single node. For multi-node configurations, uncomment this setting and set the IP addresses of each master-eligible node.
21
+
#. ``discovery.seed_hosts:`` List of the addresses of the master-eligible nodes. Each element can be either an IP address or a hostname. You may leave this setting commented if you are configuring the Wazuh indexer as a single node. For multi-node configurations, uncomment this setting and set the IP addresses of each master-eligible node.
23
22
24
23
.. code-block:: yaml
25
24
26
25
discovery.seed_hosts:
27
26
- "10.0.0.1"
28
27
- "10.0.0.2"
29
28
- "10.0.0.3"
30
-
29
+
31
30
#. ``plugins.security.nodes_dn``: List of the Distinguished Names of the certificates of all the Wazuh indexer cluster nodes. Uncomment the lines for ``node-2`` and ``node-3`` and change the common names (CN) and values according to your settings and your ``config.yml`` definitions.
#. Run the following commands, replacing ``<INDEXER_NODE_NAME>`` with the name of the Wazuh indexer node you are configuring as defined in ``config.yml``. For example, ``node-1``. This deploys the SSL certificates to encrypt communications between the Wazuh central components.
3
4
4
-
#. Run the following commands replacing ``<INDEXER_NODE_NAME>`` with the name of the Wazuh indexer node you are configuring as defined in ``config.yml``. For example, ``node-1``. This deploys the SSL certificates to encrypt communications between the Wazuh central components.
#. **Recommended action**: If no other Wazuh components will be installed on this node, run the following command to remove the ``wazuh-certificates.tar`` file.
#. **Recommended action**: If no other Wazuh components are going to be installed on this node, remove the ``wazuh-certificates.tar`` file by running ``rm -f ./wazuh-certificates.tar`` to increase security.
:description: Wazuh indexer is a highly scalable full-text search engine. Install the Wazuh indexer in a single-node or multi-node configuration according to your environment needs.
4
+
:description: Wazuh indexer is a highly scalable full-text search engine. Install the Wazuh indexer in a single-node or multi-node configuration according to your environment needs.
5
5
6
6
Installing the Wazuh indexer step by step
7
7
=========================================
8
8
9
9
Install and configure the Wazuh indexer as a single-node or multi-node cluster following step-by-step instructions. Wazuh indexer is a highly scalable full-text search engine and offers advanced security, alerting, index management, deep performance analysis, and several other features.
10
10
11
-
The installation process is divided into three stages.
11
+
The installation process is divided into three stages:
12
12
13
-
#. Certificates creation
14
-
15
-
#. Wazuh indexer nodes installation
16
-
17
-
#. Cluster initialization
13
+
#. `Certificate creation`_
14
+
#. `Wazuh indexer nodes installation`_
15
+
#. `Cluster initialization`_
18
16
17
+
.. note::
19
18
20
-
.. note::You need root user privileges to run all the commands described below.
19
+
You need root user privileges to run all the commands described below.
21
20
22
21
.. _certificates_creation:
23
22
24
-
1. Certificates creation
25
-
------------------------
26
-
.. raw:: html
23
+
Certificate creation
24
+
--------------------
27
25
28
-
<divclass="accordion-section open">
26
+
Wazuh uses certificates to establish confidentiality and encrypt communications between its central components. Follow these steps to create certificates for the Wazuh central components.
29
27
30
28
Generating the SSL certificates
31
29
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
@@ -34,68 +32,65 @@ Generating the SSL certificates
#. Edit ``./config.yml`` and replace the node names and IP values with the corresponding names and IP addresses. You need to do this for all Wazuh server, Wazuh indexer, and Wazuh dashboard nodes. Add as many node fields as needed.
41
39
42
-
.. code-block:: yaml
43
-
44
-
nodes:
45
-
# Wazuh indexer nodes
46
-
indexer:
47
-
- name: node-1
48
-
ip: "<indexer-node-ip>"
49
-
#- name: node-2
50
-
# ip: "<indexer-node-ip>"
51
-
#- name: node-3
52
-
# ip: "<indexer-node-ip>"
53
-
54
-
# Wazuh server nodes
55
-
# If there is more than one Wazuh server
56
-
# node, each one must have a node_type
57
-
server:
58
-
- name: wazuh-1
59
-
ip: "<wazuh-manager-ip>"
60
-
# node_type: master
61
-
#- name: wazuh-2
62
-
# ip: "<wazuh-manager-ip>"
63
-
# node_type: worker
64
-
#- name: wazuh-3
65
-
# ip: "<wazuh-manager-ip>"
66
-
# node_type: worker
67
-
68
-
# Wazuh dashboard nodes
69
-
dashboard:
70
-
- name: dashboard
71
-
ip: "<dashboard-node-ip>"
72
-
73
-
74
-
To learn more about how to create and configure the certificates, see the :doc:`/user-manual/wazuh-indexer-cluster/certificate-deployment` section.
40
+
.. code-block:: yaml
41
+
:emphasize-lines: 4-5, 15-16, 27-28
42
+
43
+
nodes:
44
+
# Wazuh indexer nodes
45
+
indexer:
46
+
- name: node-1
47
+
ip: "<indexer-node-ip>"
48
+
#- name: node-2
49
+
# ip: "<indexer-node-ip>"
50
+
#- name: node-3
51
+
# ip: "<indexer-node-ip>"
52
+
53
+
# Wazuh server nodes
54
+
# If there is more than one Wazuh server
55
+
# node, each one must have a node_type
56
+
server:
57
+
- name: wazuh-1
58
+
ip: "<wazuh-manager-ip>"
59
+
# node_type: master
60
+
#- name: wazuh-2
61
+
# ip: "<wazuh-manager-ip>"
62
+
# node_type: worker
63
+
#- name: wazuh-3
64
+
# ip: "<wazuh-manager-ip>"
65
+
# node_type: worker
66
+
67
+
# Wazuh dashboard nodes
68
+
dashboard:
69
+
- name: dashboard
70
+
ip: "<dashboard-node-ip>"
71
+
72
+
73
+
To learn more about how to create and configure the certificates, see the :doc:`/user-manual/wazuh-indexer-cluster/certificate-deployment` section.
75
74
76
75
#. Run ``./wazuh-certs-tool.sh`` to create the certificates. For a multi-node cluster, these certificates need to be later deployed to all Wazuh instances in your cluster.
77
76
78
77
.. code-block:: console
79
78
80
-
# bash ./wazuh-certs-tool.sh -A
79
+
# bash ./wazuh-certs-tool.sh -A
81
80
82
81
#. Compress all the necessary files.
83
82
84
83
.. code-block:: console
85
84
86
-
# tar -cvf ./wazuh-certificates.tar -C ./wazuh-certificates/ .
87
-
# rm -rf ./wazuh-certificates
88
-
85
+
# tar -cvf ./wazuh-certificates.tar -C ./wazuh-certificates/ .
86
+
# rm -rf ./wazuh-certificates
89
87
90
88
#. Copy the ``wazuh-certificates.tar`` file to all the nodes, including the Wazuh indexer, Wazuh server, and Wazuh dashboard nodes. This can be done by using the ``scp`` utility.
91
89
90
+
Wazuh indexer nodes installation
91
+
--------------------------------
92
92
93
-
2. Nodes installation
94
-
---------------------
95
-
.. raw:: html
96
-
97
-
<divclass="accordion-section open">
98
-
93
+
Follow these steps to install and configure a single-node or multi-node Wazuh indexer.
Repeat this stage of the installation process for every Wazuh indexer node in your cluster. Then proceed with initializing your single-node or multi-node cluster in the next stage.
168
+
169
+
Repeat this stage of the installation process for every Wazuh indexer node in your multi-node cluster. Then proceed with initializing your single-node or multi-node cluster in the next stage.
The final stage of installing the Wazuh indexer single-node or multi-node cluster consists of running the security admin script.
186
180
187
181
#. Run the Wazuh indexer ``indexer-security-init.sh`` script on `any` Wazuh indexer node to load the new certificates information and start the single-node or multi-node cluster.
You only have to initialize the cluster *once*, there is no need to run this command on every node.
196
-
188
+
189
+
You only have to initialize the cluster once, there is no need to run this command on every node.
190
+
197
191
Testing the cluster installation
198
192
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
199
193
200
-
#. Replace ``<WAZUH_INDEXER_IP_ADDRESS>`` and run the following commands to confirm that the installation is successful.
194
+
#. Run the following commands to confirm that the installation is successful. Replace ``<WAZUH_INDEXER_IP_ADDRESS>`` with the IP address of the Wazuh indexer and enter admin as the password when prompted:
@@ -223,15 +217,23 @@ Testing the cluster installation
223
217
"tagline" : "The OpenSearch Project: https://opensearch.org/"
224
218
}
225
219
226
-
#. Replace ``<WAZUH_INDEXER_IP_ADDRESS>`` and run the following command to check if the single-node or multi-node cluster is working correctly.
227
-
220
+
#. Run the following command to check if the cluster is working correctly. Replace ``<WAZUH_INDEXER_IP_ADDRESS>`` with the IP address of the Wazuh indexer and enter admin as the password when prompted:
The Wazuh indexer is now successfully installed on your single-node or multi-node cluster, and you can proceed with installing the Wazuh server. To perform this action, see the :doc:`../wazuh-server/step-by-step` section.
236
238
237
-
If you want to uninstall the Wazuh indexer, see :ref:`uninstall_indexer`.
239
+
To uninstall the Wazuh indexer, see :ref:`uninstall_indexer`.
0 commit comments