wazuh-documentation
wazuh-documentation copied to clipboard
The upgrade guide should mention which files to back up
Hello team,
I am opening up this issue because it will be necessary to add the files that we should back up in the installation guide: https://documentation.wazuh.com/3.13/upgrade-guide/upgrading/latest_wazuh3_minor.html
I am proposing:
ElasticSearch
/etc/elasticsearch/elasticsearch.yml
/etc/systemd/system/elasticsearch.service.d/elasticsearch.conf
/etc/elasticsearch/jvm.options
If your are using x-pack, you need to save certificates and role mappings.
Wazuh Manager
/var/ossec/api/configuration
/var/ossec/etc
/var/ossec/logs
/var/ossec/queue/rootcheck
/var/ossec/queue/agent-groups
/var/ossec/queue/agent-info
/var/ossec/queue/agents-timestamp
/var/ossec/queue/agentless
/var/ossec/queue/cluster
/var/ossec/queue/rids
/var/ossec/queue/fts
/var/ossec/var/multigroups
The next two folders must be copied with the manager service stopped.
/var/ossec/var/db/global.db
/var/ossec/queue/db
Kibana
/etc/kibana/kibana.yml
/usr/share/kibana/plugins/wazuh/wazuh.yml
You can also export dashboard from Management > Saved Objects
Dashboards are stored in the .kibana index.
Logstash
/etc/logstash/jvm.options
/etc/logstash/conf.d/01-wazuh.conf
/etc/logstash/logstash.yml
Regards,
Miguel Casares
Hello team,
This should be updated according to the latest versions.