Wazuh Multi-cluster deployment?

487 views

Skip to first unread message

Antonis Michael

unread,

Feb 2, 2022, 5:50:42 PM2/2/22

to Wazuh mailing list

Hello,

We have a use-case where there is no direct connection for two accounts. Is it possible to have 2 wazuh clusters report to a public ElasticSearch deployment and have both of those clusters under the same Wazuh kibana plugin? (as long as their apis are accessible ofcourse)

Thanks in advance,

Tony

Federico Pacher

unread,

Feb 2, 2022, 6:59:01 PM2/2/22

to Wazuh mailing list

Hi Antonis,

Yes, you can set multi-node Wazuh cluster. The multi-node installation process consists of installing several Wazuh server nodes on different hosts that communicate among them. With this installation and load balancer, you will be able to achieve the desired behavior. You can check more about Wazuh multinode here: https://documentation.wazuh.com/current/installation-guide/open-distro/distributed-deployment/step-by-step-installation/wazuh-cluster/wazuh-multi-node-cluster.html
And here you will be able to see our blog post about Load balancer: https://wazuh.com/blog/nginx-load-balancer-in-a-wazuh-cluster/
Also, here there is a video tutorial that may help you https://www.youtube.com/watch?v=rieOaM1wgSI