Remove hardcoded config files and use component defaults #572

Enaraque · 2026-01-14T16:04:28Z

Description

Previously in 4.x we had our own configuration files for both indexer and dashboard, as well as a predefined config file for AIO installations.
This had the problem that if something in the component's own file changed, having the files hardcoded meant they would become outdated with these changes, potentially causing the installation to fail.
In this PR these files have been removed and we now modify the actual files that come with the installation of each component, so if something changes in the file at any point, it will be up to date. For the AIO config.yml part, since we have it in artifact_urls.yml, we download it via URL.

Tests 🧪

AIO deployment

The AIO has been tested separately on a VM:

AIO installation logs

[ec2-user@ip-172-31-43-169 ~]$ sudo bash ./wazuh-install.sh -a -d local
14/01/2026 11:49:43 INFO: Starting Wazuh installation assistant. Wazuh version: 5.0.0
14/01/2026 11:49:43 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/01/2026 11:49:43 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/01/2026 11:49:44 INFO: --- Dependencies ---
14/01/2026 11:49:44 INFO: Installing yum-utils.
14/01/2026 11:49:44 INFO: --- Configuration files ---
14/01/2026 11:49:44 INFO: Generating configuration files.
14/01/2026 11:49:45 INFO: Generating the root certificate.
14/01/2026 11:49:45 INFO: Generating Admin certificates.
14/01/2026 11:49:45 INFO: Generating Wazuh indexer certificates.
14/01/2026 11:49:45 INFO: Generating Wazuh server certificates.
14/01/2026 11:49:45 INFO: Generating Wazuh dashboard certificates.
14/01/2026 11:49:45 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key and the certificates necessary for installation.
14/01/2026 11:49:45 INFO: --- Wazuh indexer ---
14/01/2026 11:49:45 INFO: Downloading wazuh_indexer package: wazuh-indexer-5.0.0-latest.x86_64.rpm
14/01/2026 11:50:03 INFO: wazuh_indexer package downloaded successfully: /home/ec2-user/wazuh-install-packages/wazuh-indexer-5.0.0-latest.x86_64.rpm
14/01/2026 11:50:03 INFO: Starting Wazuh indexer installation.
14/01/2026 11:50:19 INFO: Wazuh indexer installation finished.
14/01/2026 11:50:19 INFO: Wazuh indexer post-install configuration finished.
14/01/2026 11:50:19 INFO: Starting service wazuh-indexer.
14/01/2026 11:50:37 INFO: wazuh-indexer service started.
14/01/2026 11:50:50 INFO: Wazuh indexer cluster security configuration initialized.
14/01/2026 11:50:50 INFO: --- Wazuh server ---
14/01/2026 11:50:50 INFO: Downloading wazuh_manager package: wazuh-manager-5.0.0-latest.x86_64.rpm
14/01/2026 11:51:00 INFO: wazuh_manager package downloaded successfully: /home/ec2-user/wazuh-install-packages/wazuh-manager-5.0.0-latest.x86_64.rpm
14/01/2026 11:51:00 INFO: Starting the Wazuh manager installation.
14/01/2026 11:51:42 INFO: Wazuh manager installation finished.
14/01/2026 11:51:43 INFO: Wazuh manager vulnerability detection configuration finished.
14/01/2026 11:51:43 INFO: Starting service wazuh-manager.
14/01/2026 11:51:49 INFO: wazuh-manager service started.
14/01/2026 11:51:49 INFO: --- Wazuh dashboard ---
14/01/2026 11:51:49 INFO: Downloading wazuh_dashboard package: wazuh-dashboard-5.0.0-latest.x86_64.rpm
14/01/2026 11:51:57 INFO: wazuh_dashboard package downloaded successfully: /home/ec2-user/wazuh-install-packages/wazuh-dashboard-5.0.0-latest.x86_64.rpm
14/01/2026 11:51:57 INFO: Starting Wazuh dashboard installation.
14/01/2026 11:53:48 INFO: Wazuh dashboard installation finished.
14/01/2026 11:53:48 INFO: Wazuh dashboard post-install configuration finished.
14/01/2026 11:53:48 INFO: Starting service wazuh-dashboard.
14/01/2026 11:53:48 INFO: wazuh-dashboard service started.
14/01/2026 11:53:48 INFO: Wazuh dashboard web application initialized.
14/01/2026 11:53:48 INFO: --- Summary ---
14/01/2026 11:53:48 INFO: You can access the web interface https://<wazuh_dashboard_ip>:443
    User: admin
    Password: admin
14/01/2026 11:53:49 INFO: Installation finished.

Distributed deployment

On the other hand, a distributed deployment with 3 machines in total:

VM 1: 1 indexer, 1 master manager
VM 2: 1 indexer, 1 worker manager
VM 3: 1 indexer, 1 dashboard

Indexers installation

VM 1

[ec2-user@ip-172-31-43-169 ~]$ sudo bash ./wazuh-install.sh -g
14/01/2026 15:04:57 INFO: Starting Wazuh installation assistant. Wazuh version: 5.0.0
14/01/2026 15:04:57 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/01/2026 15:04:57 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/01/2026 15:04:57 INFO: --- Configuration files ---
14/01/2026 15:04:57 INFO: Generating configuration files.
14/01/2026 15:04:57 INFO: Generating the root certificate.
14/01/2026 15:04:57 INFO: Generating Admin certificates.
14/01/2026 15:04:57 INFO: Generating Wazuh indexer certificates.
14/01/2026 15:04:58 INFO: Generating Wazuh server certificates.
14/01/2026 15:04:58 INFO: Generating Wazuh dashboard certificates.
14/01/2026 15:04:58 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key and the certificates necessary for installation.
[ec2-user@ip-172-31-43-169 ~]$ sudo bash ./wazuh-install.sh -d local -wi node-1
14/01/2026 15:06:03 INFO: Starting Wazuh installation assistant. Wazuh version: 5.0.0
14/01/2026 15:06:03 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/01/2026 15:06:03 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/01/2026 15:06:03 INFO: --- Wazuh indexer ---
14/01/2026 15:06:03 INFO: Downloading wazuh_indexer package: wazuh-indexer-5.0.0-latest.x86_64.rpm
14/01/2026 15:06:21 INFO: wazuh_indexer package downloaded successfully: /home/ec2-user/wazuh-install-packages/wazuh-indexer-5.0.0-latest.x86_64.rpm
14/01/2026 15:06:21 INFO: Starting Wazuh indexer installation.
14/01/2026 15:06:38 INFO: Wazuh indexer installation finished.
14/01/2026 15:06:38 INFO: Wazuh indexer post-install configuration finished.
14/01/2026 15:06:38 INFO: Starting service wazuh-indexer.
14/01/2026 15:07:26 INFO: wazuh-indexer service started.
14/01/2026 15:07:26 INFO: Installation finished.

[ec2-user@ip-172-31-43-169 ~]$ sudo cat /etc/wazuh-indexer/opensearch.yml
network.host: 172.31.43.169
node.name: node-1
cluster.initial_cluster_manager_nodes:
- "node-1"
- "node-2"
- "node-3"

cluster.name: "wazuh-cluster"
discovery.seed_hosts:
  - "172.31.43.169"
  - "172.31.35.71"
  - "172.31.35.227"

node.max_local_storage_nodes: "3"
path.data: /var/lib/wazuh-indexer
path.logs: /var/log/wazuh-indexer

plugins.security.ssl.http.pemcert_filepath: /etc/wazuh-indexer/certs/node-1.pem
plugins.security.ssl.http.pemkey_filepath: /etc/wazuh-indexer/certs/node-1-key.pem
plugins.security.ssl.http.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
plugins.security.ssl.transport.pemcert_filepath: /etc/wazuh-indexer/certs/node-1.pem
plugins.security.ssl.transport.pemkey_filepath: /etc/wazuh-indexer/certs/node-1-key.pem
plugins.security.ssl.transport.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
plugins.security.ssl.http.enabled: true
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.transport.resolve_hostname: false

plugins.security.authcz.admin_dn:
- "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.nodes_dn:
- "CN=node-1,OU=Wazuh,O=Wazuh,L=California,C=US"
- "CN=node-2,OU=Wazuh,O=Wazuh,L=California,C=US"
- "CN=node-3,OU=Wazuh,O=Wazuh,L=California,C=US"

plugins.security.restapi.roles_enabled:
- "all_access"
- "security_rest_api_access"

plugins.security.system_indices.enabled: true
plugins.security.system_indices.indices: [".plugins-ml-model", ".plugins-ml-task", ".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opensearch-notifications-*", ".opensearch-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"]

VM 2

[ec2-user@ip-172-31-35-71 ~]$ sudo bash wazuh-install.sh -d local -wi node-2
14/01/2026 15:09:22 INFO: Starting Wazuh installation assistant. Wazuh version: 5.0.0
14/01/2026 15:09:22 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/01/2026 15:09:22 INFO: The recommended systems are: Red Hat Enterprise Linux 7, 8, 9; CentOS 7, 8; Amazon Linux 2; Amazon Linux 2023; Ubuntu 16.04, 18.04, 20.04, 22.04; Rocky Linux 9.4.
14/01/2026 15:09:22 WARNING: The current system does not match with the list of recommended systems. The installation may not work properly.
14/01/2026 15:09:22 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/01/2026 15:09:22 INFO: --- Dependencies ---
14/01/2026 15:09:22 INFO: Installing lsof.
14/01/2026 15:09:23 INFO: --- Wazuh indexer ---
14/01/2026 15:09:23 INFO: Downloading wazuh_indexer package: wazuh-indexer-5.0.0-latest.x86_64.rpm
14/01/2026 15:09:56 INFO: wazuh_indexer package downloaded successfully: /home/ec2-user/wazuh-install-packages/wazuh-indexer-5.0.0-latest.x86_64.rpm
14/01/2026 15:09:56 INFO: Starting Wazuh indexer installation.
14/01/2026 15:10:11 INFO: Wazuh indexer installation finished.
14/01/2026 15:10:11 INFO: Wazuh indexer post-install configuration finished.
14/01/2026 15:10:11 INFO: Starting service wazuh-indexer.
14/01/2026 15:10:30 INFO: wazuh-indexer service started.
14/01/2026 15:10:30 INFO: --- Dependencies ---
14/01/2026 15:10:30 INFO: Removing lsof.
14/01/2026 15:10:31 INFO: Installation finished.

[ec2-user@ip-172-31-35-71 ~]$ sudo cat /etc/wazuh-indexer/opensearch.yml
network.host: 172.31.35.71
node.name: node-2
cluster.initial_cluster_manager_nodes:
- "node-1"
- "node-2"
- "node-3"

cluster.name: "wazuh-cluster"
discovery.seed_hosts:
  - "172.31.43.169"
  - "172.31.35.71"
  - "172.31.35.227"

node.max_local_storage_nodes: "3"
path.data: /var/lib/wazuh-indexer
path.logs: /var/log/wazuh-indexer

plugins.security.ssl.http.pemcert_filepath: /etc/wazuh-indexer/certs/node-2.pem
plugins.security.ssl.http.pemkey_filepath: /etc/wazuh-indexer/certs/node-2-key.pem
plugins.security.ssl.http.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
plugins.security.ssl.transport.pemcert_filepath: /etc/wazuh-indexer/certs/node-2.pem
plugins.security.ssl.transport.pemkey_filepath: /etc/wazuh-indexer/certs/node-2-key.pem
plugins.security.ssl.transport.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
plugins.security.ssl.http.enabled: true
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.transport.resolve_hostname: false

plugins.security.authcz.admin_dn:
- "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.nodes_dn:
- "CN=node-1,OU=Wazuh,O=Wazuh,L=California,C=US"
- "CN=node-2,OU=Wazuh,O=Wazuh,L=California,C=US"
- "CN=node-3,OU=Wazuh,O=Wazuh,L=California,C=US"

plugins.security.restapi.roles_enabled:
- "all_access"
- "security_rest_api_access"

plugins.security.system_indices.enabled: true
plugins.security.system_indices.indices: [".plugins-ml-model", ".plugins-ml-task", ".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opensearch-notifications-*", ".opensearch-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"]

VM 3

ubuntu@ip-172-31-35-227:~$ sudo bash wazuh-install.sh -d local -wi node-3
14/01/2026 15:11:53 INFO: Starting Wazuh installation assistant. Wazuh version: 5.0.0
14/01/2026 15:11:53 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/01/2026 15:12:09 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/01/2026 15:12:12 INFO: --- Wazuh indexer ---
14/01/2026 15:12:12 INFO: Downloading wazuh_indexer package: wazuh-indexer_5.0.0-latest_amd64.deb
14/01/2026 15:12:29 INFO: wazuh_indexer package downloaded successfully: /home/ubuntu/wazuh-install-packages/wazuh-indexer_5.0.0-latest_amd64.deb
14/01/2026 15:12:29 INFO: Starting Wazuh indexer installation.
14/01/2026 15:13:06 INFO: Wazuh indexer installation finished.
14/01/2026 15:13:06 INFO: Wazuh indexer post-install configuration finished.
14/01/2026 15:13:06 INFO: Starting service wazuh-indexer.
14/01/2026 15:13:26 INFO: wazuh-indexer service started.
14/01/2026 15:13:26 INFO: Installation finished.

ubuntu@ip-172-31-35-227:~$ sudo cat /etc/wazuh-indexer/opensearch.yml
network.host: 172.31.35.227
node.name: node-3
cluster.initial_cluster_manager_nodes:
- "node-1"
- "node-2"
- "node-3"

cluster.name: "wazuh-cluster"
discovery.seed_hosts:
  - "172.31.43.169"
  - "172.31.35.71"
  - "172.31.35.227"

node.max_local_storage_nodes: "3"
path.data: /var/lib/wazuh-indexer
path.logs: /var/log/wazuh-indexer

plugins.security.ssl.http.pemcert_filepath: /etc/wazuh-indexer/certs/node-3.pem
plugins.security.ssl.http.pemkey_filepath: /etc/wazuh-indexer/certs/node-3-key.pem
plugins.security.ssl.http.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
plugins.security.ssl.transport.pemcert_filepath: /etc/wazuh-indexer/certs/node-3.pem
plugins.security.ssl.transport.pemkey_filepath: /etc/wazuh-indexer/certs/node-3-key.pem
plugins.security.ssl.transport.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
plugins.security.ssl.http.enabled: true
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.transport.resolve_hostname: false

plugins.security.authcz.admin_dn:
- "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.nodes_dn:
- "CN=node-1,OU=Wazuh,O=Wazuh,L=California,C=US"
- "CN=node-2,OU=Wazuh,O=Wazuh,L=California,C=US"
- "CN=node-3,OU=Wazuh,O=Wazuh,L=California,C=US"

plugins.security.restapi.roles_enabled:
- "all_access"
- "security_rest_api_access"

plugins.security.system_indices.enabled: true
plugins.security.system_indices.indices: [".plugins-ml-model", ".plugins-ml-task", ".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opensearch-notifications-*", ".opensearch-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"]

ubuntu@ip-172-31-35-227:~$ sudo bash wazuh-install.sh --start-cluster
14/01/2026 15:14:39 INFO: Starting Wazuh installation assistant. Wazuh version: 5.0.0
14/01/2026 15:14:39 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/01/2026 15:14:44 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/01/2026 15:14:53 INFO: Wazuh indexer cluster security configuration initialized.
14/01/2026 15:14:53 INFO: Wazuh indexer cluster started.

ubuntu@ip-172-31-35-227:~$ curl -k -u admin https://172.31.35.227:9200
Enter host password for user 'admin':
{
  "name" : "node-3",
  "cluster_name" : "wazuh-cluster",
  "cluster_uuid" : "kQsZnJenSBCEIltLTrdXaw",
  "version" : {
    "distribution" : "opensearch",
    "number" : "3.3.2",
    "build_type" : "deb",
    "build_hash" : "fde35b26b0cac826d77c9ae078631efedf2522f9",
    "build_date" : "2026-01-14T01:45:13.606195328Z",
    "build_snapshot" : false,
    "lucene_version" : "10.3.1",
    "minimum_wire_compatibility_version" : "2.19.0",
    "minimum_index_compatibility_version" : "2.0.0"
  },
  "tagline" : "The OpenSearch Project: https://opensearch.org/"
}

Managers installation

VM 1

[ec2-user@ip-172-31-43-169 ~]$ sudo bash ./wazuh-install.sh -d local -ws wazuh-1
14/01/2026 15:17:26 INFO: Starting Wazuh installation assistant. Wazuh version: 5.0.0
14/01/2026 15:17:26 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/01/2026 15:17:26 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/01/2026 15:17:27 INFO: --- Wazuh server ---
14/01/2026 15:17:27 INFO: Downloading wazuh_manager package: wazuh-manager-5.0.0-latest.x86_64.rpm
14/01/2026 15:17:37 INFO: wazuh_manager package downloaded successfully: /home/ec2-user/wazuh-install-packages/wazuh-manager-5.0.0-latest.x86_64.rpm
14/01/2026 15:17:37 INFO: Starting the Wazuh manager installation.
14/01/2026 15:18:17 INFO: Wazuh manager installation finished.
14/01/2026 15:18:17 INFO: Wazuh manager vulnerability detection configuration finished.
14/01/2026 15:18:17 INFO: Starting service wazuh-manager.
14/01/2026 15:18:24 INFO: wazuh-manager service started.
14/01/2026 15:18:24 INFO: Installation finished.
# indexer and cluster sections in the ossec.conf
 <indexer>
    <hosts>
      <host>https://172.31.35.227:9200</host>
      <host>https://172.31.35.71:9200</host>
      <host>https://172.31.43.169:9200</host>
    </hosts>
    <ssl>
      <certificate_authorities>
        <ca>/var/ossec/etc/certs/root-ca.pem</ca>
      </certificate_authorities>
      <certificate>/var/ossec/etc/certs/wazuh-1.pem</certificate>
      <key>/var/ossec/etc/certs/wazuh-1-key.pem</key>
    </ssl>
  </indexer>

  <cluster>
    <name>wazuh_cluster</name>
    <node_name>wazuh-1</node_name>
    <node_type>master</node_type>
    <key>881db8f844e7639ae662c4b597e4e97b</key>
    <port>1516</port>
    <bind_addr>0.0.0.0</bind_addr>
    <nodes>
        <node>172.31.43.169</node>
    </nodes>
    <hidden>no</hidden>
  </cluster>

VM 2

[ec2-user@ip-172-31-35-71 ~]$ sudo bash wazuh-install.sh -d local -ws wazuh-2 -o
14/01/2026 15:37:10 INFO: Starting Wazuh installation assistant. Wazuh version: 5.0.0
14/01/2026 15:37:10 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/01/2026 15:37:10 INFO: The recommended systems are: Red Hat Enterprise Linux 7, 8, 9; CentOS 7, 8; Amazon Linux 2; Amazon Linux 2023; Ubuntu 16.04, 18.04, 20.04, 22.04; Rocky Linux 9.4.
14/01/2026 15:37:10 WARNING: The current system does not match with the list of recommended systems. The installation may not work properly.
14/01/2026 15:37:10 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/01/2026 15:37:10 INFO: --- Wazuh server ---
14/01/2026 15:37:10 INFO: Downloading wazuh_manager package: wazuh-manager-5.0.0-latest.x86_64.rpm
14/01/2026 15:37:23 INFO: wazuh_manager package downloaded successfully: /home/ec2-user/wazuh-install-packages/wazuh-manager-5.0.0-latest.x86_64.rpm
14/01/2026 15:37:23 INFO: Starting the Wazuh manager installation.
14/01/2026 15:38:03 INFO: Wazuh manager installation finished.
14/01/2026 15:38:03 INFO: Wazuh manager vulnerability detection configuration finished.
14/01/2026 15:38:03 INFO: Starting service wazuh-manager.
14/01/2026 15:38:08 INFO: wazuh-manager service started.
14/01/2026 15:38:08 INFO: Installation finished.

  <indexer>
    <hosts>
      <host>https://172.31.35.227:9200</host>
      <host>https://172.31.35.71:9200</host>
      <host>https://172.31.43.169:9200</host>
    </hosts>
    <ssl>
      <certificate_authorities>
        <ca>/var/ossec/etc/certs/root-ca.pem</ca>
      </certificate_authorities>
      <certificate>/var/ossec/etc/certs/wazuh-2.pem</certificate>
      <key>/var/ossec/etc/certs/wazuh-2-key.pem</key>
    </ssl>
  </indexer>
  <cluster>
    <name>wazuh_cluster</name>
    <node_name>wazuh-2</node_name>
    <node_type>worker</node_type>
    <key>881db8f844e7639ae662c4b597e4e97b</key>
    <port>1516</port>
    <bind_addr>0.0.0.0</bind_addr>
    <nodes>
        <node>172.31.43.169</node>
    </nodes>
    <hidden>no</hidden>
  </cluster>

Dashboard installation

VM 3

ubuntu@ip-172-31-35-227:~$ sudo bash wazuh-install.sh -d local -wd dashboard
14/01/2026 15:41:00 INFO: Starting Wazuh installation assistant. Wazuh version: 5.0.0
14/01/2026 15:41:00 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/01/2026 15:41:05 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/01/2026 15:41:08 INFO: --- Dependencies ----
14/01/2026 15:41:08 INFO: Installing debhelper.
14/01/2026 15:41:25 INFO: --- Wazuh dashboard ----
14/01/2026 15:41:25 INFO: Downloading wazuh_dashboard package: wazuh-dashboard_5.0.0-latest_amd64.deb
14/01/2026 15:41:29 INFO: wazuh_dashboard package downloaded successfully: /home/ubuntu/wazuh-install-packages/wazuh-dashboard_5.0.0-latest_amd64.deb
14/01/2026 15:41:29 INFO: Starting Wazuh dashboard installation.
14/01/2026 15:42:11 INFO: Wazuh dashboard installation finished.
14/01/2026 15:42:11 INFO: Wazuh dashboard post-install configuration finished.
14/01/2026 15:42:11 INFO: Starting service wazuh-dashboard.
14/01/2026 15:42:12 INFO: wazuh-dashboard service started.
14/01/2026 15:42:12 INFO: Wazuh dashboard web application initialized.
14/01/2026 15:42:12 INFO: --- Summary ---
14/01/2026 15:42:12 INFO: You can access the web interface https://<wazuh_dashboard_ip>:443
    User: admin
    Password: admin
14/01/2026 15:42:12 INFO: Installation finished.
root@ip-172-31-35-227:/home/ubuntu# cat /etc/wazuh-dashboard/opensearch_dashboards.yml 
server.host: 0.0.0.0
server.port: 443
opensearch.hosts: ["https://172.31.43.169:9200", "https://172.31.35.71:9200", "https://172.31.35.227:9200"]
opensearch.ssl.verificationMode: certificate
#opensearch.username:
#opensearch.password:
opensearch.requestHeadersAllowlist: ["securitytenant","Authorization"]
opensearch_security.multitenancy.enabled: false
opensearch_security.readonly_mode.roles: ["kibana_read_only"]
server.ssl.enabled: true
server.ssl.key: "/etc/wazuh-dashboard/certs/dashboard-key.pem"
server.ssl.certificate: "/etc/wazuh-dashboard/certs/dashboard.pem"
opensearch.ssl.certificateAuthorities: ["/etc/wazuh-dashboard/certs/root-ca.pem"]
uiSettings.overrides.defaultRoute: /app/wz-home
# Session expiration settings
opensearch_security.cookie.ttl: 900000
opensearch_security.session.ttl: 900000
opensearch_security.session.keepalive: true

# Define the Wazuh server hosts
wazuh_core.hosts:
  default:
    url: https://172.31.43.169
    port: 55000
    username: wazuh-wui
    password: wazuh-wui
    run_as: false

…n-files-and-modify-them-instead

Enaraque added 3 commits January 13, 2026 17:50

add components onfiguration steps

422b87a

Fix sed commands and indexer names variable

2eba72d

delete templates

d57f1a5

Enaraque requested a review from a team January 14, 2026 16:04

Enaraque self-assigned this Jan 14, 2026

Enaraque linked an issue Jan 14, 2026 that may be closed by this pull request

Development - DevOps 5.0 adaptation - Remove harcoded configuration files and modify them instead #542

Closed

6 tasks

Enaraque added 3 commits January 14, 2026 17:10

Merge branch 'main' into enhancement/542-remove-harcoded-configuratio…

d5949d3

…n-files-and-modify-them-instead

fix install curl dependency in al2023

63ac7ba

update changelog

7489ffa

c-bordon previously approved these changes Jan 14, 2026

View reviewed changes

Resolved conflicts with main branch

59914c4

c-bordon dismissed their stale review via 59914c4 January 14, 2026 17:07

c-bordon approved these changes Jan 14, 2026

View reviewed changes

c-bordon merged commit d11fa4e into main Jan 14, 2026
0 of 2 checks passed

c-bordon deleted the enhancement/542-remove-harcoded-configuration-files-and-modify-them-instead branch January 14, 2026 17:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Remove hardcoded config files and use component defaults #572

Remove hardcoded config files and use component defaults #572

Uh oh!

Enaraque commented Jan 14, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Remove hardcoded config files and use component defaults #572

Remove hardcoded config files and use component defaults #572

Uh oh!

Conversation

Enaraque commented Jan 14, 2026

Description

Tests 🧪

AIO deployment

Distributed deployment

Indexers installation

Managers installation

Dashboard installation

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants