wazuh-documentation icon indicating copy to clipboard operation
wazuh-documentation copied to clipboard

The upgrade guide should mention which files to back up

Open MiguelCasaresRobles opened this issue 4 years ago • 1 comments

Hello team,

I am opening up this issue because it will be necessary to add the files that we should back up in the installation guide: https://documentation.wazuh.com/3.13/upgrade-guide/upgrading/latest_wazuh3_minor.html

I am proposing:

ElasticSearch

/etc/elasticsearch/elasticsearch.yml

/etc/systemd/system/elasticsearch.service.d/elasticsearch.conf

/etc/elasticsearch/jvm.options

If your are using x-pack, you need to save certificates and role mappings.

Wazuh Manager

/var/ossec/api/configuration
/var/ossec/etc
/var/ossec/logs
/var/ossec/queue/rootcheck
/var/ossec/queue/agent-groups
/var/ossec/queue/agent-info
/var/ossec/queue/agents-timestamp
/var/ossec/queue/agentless
/var/ossec/queue/cluster
/var/ossec/queue/rids
/var/ossec/queue/fts
/var/ossec/var/multigroups

The next two folders must be copied with the manager service stopped.

/var/ossec/var/db/global.db
/var/ossec/queue/db

Kibana

/etc/kibana/kibana.yml

/usr/share/kibana/plugins/wazuh/wazuh.yml

You can also export dashboard from Management > Saved Objects
Dashboards are stored in the .kibana index.

Logstash


/etc/logstash/jvm.options

/etc/logstash/conf.d/01-wazuh.conf

/etc/logstash/logstash.yml

Regards,

Miguel Casares

MiguelCasaresRobles avatar Sep 29 '20 16:09 MiguelCasaresRobles

Hello team,

This should be updated according to the latest versions.

MiguelCasaresRobles avatar Sep 19 '22 09:09 MiguelCasaresRobles