Wazuh OVA

[reza fathi]

Hello,

We have around 200 endpoints in our company and I wanted to install wazuh OVA instead of single-node cluster. My question is that can I increase the VM machine's RAM,CPU and Storage to support 200 endpoints by wazuh VM?

[Nicolas Osvaldo Fernandez]

Hello, nice to greet you.

Yes, you can increase the capacity of memory, CPU and storage. Depending on the virtualizer you use, the way you do it changes.

For example, if you use VBOX, you can make the changes in the configuration section -> system. In the "motherboard" tab you can increase the RAM memory and in "Processor" the processing capacity. And to increase the storage capacity, you should go to the Virtual Media Manager, choose the virtual drive wazuh-4.4.4-disk-1.vdi (if the version of the OVA you downloaded is 4.4.4) and increase the size in the tab attributes.

With which virtualizer are you going to carry out the implementation?

Greetings,

Nicolas

[reza fathi]

Hi Nicolas,

I am using Vmware ESXI. How much should I increase CPU cores, RAM and Storage in order to support 200 endpoints?

[Nicolas Osvaldo Fernandez]

Hello, nice to greet you.

According to the official documentation, which you can review through the following link, a setup of 8 vCPUs, 8 GiB of RAM and 200 GB of storage is recommended for 100 agents.

Keep in mind that what will most impact the volume of agents is storage. For a number of agents greater than 100, a distributed scheme is recommended, in this case, you could have two nodes running with the setup indicated above, that way you could balance the load without problems.

Let me know if the information provided helped you.

Greetings

Nicolás