Separate Wazuh Components from All-in-One Deployment

[Miran Ul Haq]

Hi Community,

I have currently Wazuh All-in-One Deployment, and would like to separate the indexer with manager for better management and resource utilisation.

Is there a way we can do this?

Additionally, my server is running on AWS Linux 2023; I would like to migrate this to Ubuntu 24.04, can I do that without harming Wazuh Services?

Assistance would be appreciated.

Regards,
Miran

[Olamilekan Abdullateef Ajani]

Hello Miran,

Yes, you can definitely do this.
First, on your existing AWS Linux 2023 server, back up critical data: You can follow this guide on this https://documentation.wazuh.com/current/migration-guide/creating/wazuh-central-components.html

Provision the new instance: Ubuntu 24.04 server

Install Wazuh components as desired. If you intend to separate services, this is the part where you make that happen in case you want a distributed architecture.

Then restore your data from backup: https://documentation.wazuh.com/current/migration-guide/restoring/index.html
You will find options for single-node and multi-node restoration options here.

You can refer to the documentation mentioned; if you need further clarification, please let us know.