Wazuh Mnager id not working

[Wauh Test]

Hi Team,

My wazuh instance is down due to some reason and I am working on fixing it. 

Will wazuh agents will keep the logs from the time manager went down?

Will it be possible to get all logs from agents once the machine is up and running?

Regards,

WazuhTest

[Alberto Rodriguez]

Hello

  The agents have a buffer where the logs are stored when they can't send them to the Wazuh manager. It depends on the Wazuh manager time down, but you will probably lose some logs. The solution would be to configure a Wazuh manager cluster. For instance, in a configuration like one Master Wazuh manager and two workers, if your agents were connected to one of the two workers and it goes down, the agent can still be sending their logs to the other one. Please take a look: https://documentation.wazuh.com/current/user-manual/configuring-cluster/basics.html

If you have any doubt, let me know.