wazuh-monitoring index keeps changing to 1 replica

[simcha...@dplwireless.com]

wazuh-monitoring index settings keeps changing to 1 replica even though the wazuh-agent template only has 1 shard and 0 replicas.. this is very frustrating...  I've tried restarting elastic, reinstalling wazuh plugin and restarting kibana... 

any ideas?

thanks!

[Juanjo Jiménez]

Hello Simcha,

Apologies for the inconvenience. Let me try to help you with this.

The shards and replicas settings for the wazuh-monitoring-3.x-* indices can be adjusted on the Wazuh app configuration file. More information can be found here, in the documentation.

Open the /usr/share/kibana/plugins/wazuh/config.yml file, locate wazuh.monitoring.shards and wazuh.monitoring.replicas settings. If the options are commented, remove the comment character (#) and modify them with the desired values. In your case, your configuration file should look like this:

# Configure wazuh-monitoring-3.x-* indices shards and replicas.
wazuh.monitoring.shards: 1
wazuh.monitoring.replicas: 0

After applying the changes, restart the Kibana service:

systemctl restart kibana

This should apply the changes to the new wazuh-monitoring indices. Keep in mind that every time you reinstall the Wazuh app, the configuration file is erased and you have to re-configure it to your needs before starting the Kibana service (the configuration file is not preserved between upgrades).

Let us know if this solves your problem.

Regards,
Juanjo

1-800-561-8880

dplwireless.com

---

This e-mail, and any attachments, contains information that is, or may be, confidential and proprietary. If you are not the intended recipient, please notify the sender that you have received this communication in error, and delete it.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/711b06c5-925b-41e4-8bf1-140225bebd8d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.