Update to Wazuh v4.1.2 - Kibana v7.10.2

[Lucio Emanuel Soldo]

 Hi everyone, how are you doing?

First off all, thank you very much for your help.

Well, I received the email noticed with the new version Wazuh v4.1.2 - Kibana v7.10.2

My current version off Wazuh is attached here from a picture.

My questions are:

1) Do I need update only Wazuh by following the following https://documentation.wazuh.com/current/upgrade-guide/upgrading-wazuh.html ?

2) What about Kibana, Do I need udpate it or not?

3) Could I update only the Wazuh Manager?

Thank you very much!

[Dario Menten]

Hello Lucio,

Thanks to you for posting in our communities.

I will answer your questions.

1- Yes, that is the guide for Upgrading just Wazuh Manager, and you need to follow it to get the 4.1.2 version. The main Guide link is this: https://documentation.wazuh.com/current/upgrade-guide/index.html

2- Yes, you need to upgrade Kibana also (As well as Opendistro for Elasticsearch and Filebeat-oss) following the next step in the main guide: https://documentation.wazuh.com/current/upgrade-guide/elasticsearch-kibana-filebeat/upgrading-open-distro.html

     Note: If you are using Elastic Stack basic license instead of Opendistro for Elasticsearch, you need to follow this guide: https://documentation.wazuh.com/current/upgrade-guide/elasticsearch-kibana-filebeat/upgrading-elastic-stack.html

3- If you plan to use the complete solution (Wazuh+ODFE/ELK Basic License) you need to complete the whole process in upgrading the whole solution. But if you plan to use only Wazuh Manager, you can choose to upgrade just the manager.

We recommend using OpenDistro For Elasticsearch, and follow the guide to upgrade the whole solution.

I hope this can solve your doubts, any question please do not hesitate on reply back.

Kind Regards.

[Lucio Emanuel Soldo]

Hi Dario,

Thank you very much.

I have a lot off problem about the installation.

Comments:

1) Wazuh Manager was installed without problem.

2) Respect to Elasticsearch, Kibana, and so on....many many problems following the guide. But surely it was my fault.

           2.1) Upgrading Elasticsearch fails completely. Message about it couldn't connect to IP:9200 (really, I never connect to Elasticsearch, I don't know exactly if the port is upping at that port. I mean problem following this part of the guide:

                            curl -X PUT "https://127.0.0.1:9200/_cluster/settings"  -u <username>:<password> -k -H 'Content-Type: application/json' -d'

{

  "persistent": {

    "cluster.routing.allocation.enable": "primaries"

  }

}

'

I omitted step 1 and 2, execute step 3 ok,  then when I execute step 4 yum install opendistroforelasticsearch-1.12.0 a message appears telling I have the last version and it's not necessary to install it.

           2.2) About Filebeat severl message appears with error. But when I try to install , again, a message appears telling me the last version is current installed.

            2.3) About Kibana, step 4 yum install opendistroforelasticsearch-kibana-1.12.0 a message appears telling me the last version is installed. Step 7 cd /usr/share/kibana/

sudo -u kibana /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/4.x/ui/kibana/wazuh_kibana-4.1.2_7.10.0-1.zip I replaced .zip for wazuh_kibana-4.1.2_7.10.2-1.zip  because right now I have installed the version 7.10.0, but when I try to install a message appears telling me that wazu kibana 7.10.0 is incompatible with plugin 7.10.2

As you can see it was very frustrating installation. 

If I have right now 4.1.0 wazuh and 7.10.0 Kibana, is the correct guide for me in order to update to 4.1.2 wazuh and 7.10.2 Kibana version?

Thank you very much!

[Dario Menten]

Hello Lucio,

My apologies, I did not see this reply, please tell me do you still have issues with this?

Are you making an installation or an Upgrade?

I look forward to your feedback

Kind Regards

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/5769191d-9c7e-47a0-a192-8c4a718aa443n%40googlegroups.com.