

Hello,
Thank you for using Wazuh
The high RAM usage could be normal because the Wazuh installation assistant (wazuh-install.sh) automatically assigns the Wazuh indexer java heap memory process half of a “free -m” total available memory. If you have 72GB ram, the /etc/wazuh-indexer/jvm.options has been configured to 36GB, as Elasticsearch documentation recommends. You can change this value to your desired heap memory value using the settings Xms and Xmx. Could you please check and confirm?
Thanks.