wazuh manager cluster master conf

[tsai kk]

  "In the Wazuh-manager cluster, for the nodes setting on the master, should I input the IP of the master or the IP of the workers?"  

[Himanshu Sharma]

Hi Team,

In a Wazuh server cluster, there can only be one master node in a cluster while all other Wazuh servers are the worker nodes. For both node types, the configuration file /var/ossec/etc/ossec.conf contains the cluster configuration values. You need to provide the master node IP on both nodes.

<node> specifies the address of the master node within the <nodes> block and this must be specified in all nodes including the master node itself. The address can be either an IP or a DNS.

Sample Master node configuration:

<cluster>
    <name>wazuh</name>
    <node_name>master-node</node_name>
    <key>c98b62a9b6169ac5f67dae55ae4a9088</key>
    <node_type>master</node_type>
    <port>1516</port>
    <bind_addr>0.0.0.0</bind_addr>
    <nodes>
        <node>MASTER_NODE_IP</node>
    </nodes>
    <hidden>no</hidden>
    <disabled>no</disabled>
</cluster>

Reference: https://documentation.wazuh.com/current/user-manual/manager/wazuh-server-cluster.html#wazuh-cluster-nodes-configuration