Wazuh Installation on Ubuntu 22.04

[Nikhil k kuttan]

Hi Everyone.

My wazuh server got crashed because of low space in var folder...I am going to reinstall in ubuntu 22.04. Kindly let me know if i need to follow any standard partitions policies in order to stay stable performance. I am not able to see the prerequisites for wazuh server installation for ubuntu and the storage management standards.
My requirements - 600 endpoints needs to monitor...

Regards,

Nikhil.

[Chema Martinez]

Hi Nikhil,

Currently, the Wazuh installation is self-contained in the installation folder, by default /var/ossec. The filesystem where that location is mounted should have at least the following free space for a correct installation:

• 600MB free for the manager installation. The current v4.3.9 takes 564MB after the installation.
• Depending on the number of agents that you attempt to monitor, you need to calculate how much space is needed. You can take this documentation as a reference to estimate the disk usage needed for your 600 endpoints.

According to this table, to monitor 600 workstations you would need 24 GB to store the accumulated alerts.

I hope it helps!

Regards,

Chema.