yahoo_1999/fk-wazuh
1
0
Fork 0
forked from wazuh/wazuh-docker
Code Pull Requests Activity

Add Wazuh indexer cluster configuration

Browse Source
This commit is contained in:
vcerenu
2022-01-25 12:29:04 -03:00
parent 8327d5bed2
commit d294ff5cd0
5 changed files with 14 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker-compose.yml
+1 -1
View File
@@ -30,7 +30,7 @@ services:
- filebeat_var:/var/lib/filebeat - filebeat_var:/var/lib/filebeat
elasticsearch: elasticsearch:
image: wazuh/wazuh-indexer:4.3.0 image: wazuh-indexer
hostname: elasticsearch hostname: elasticsearch
restart: always restart: always
ports: ports:
production_cluster/elastic_opendistro/wazuh-indexer-node1.yml
+1 -1
View File
@@ -2,7 +2,7 @@ network.host: elasticsearch
cluster.name: wazuh-cluster cluster.name: wazuh-cluster
node.name: elasticsearch node.name: elasticsearch
discovery.seed_hosts: elasticsearch,elasticsearch-2,elasticsearch-3 discovery.seed_hosts: elasticsearch,elasticsearch-2,elasticsearch-3
cluster.initial_master_nodes: elasticsearch,elasticsearch-2,elasticsearch-3 cluster.initial_master_nodes: elasticsearch
bootstrap.memory_lock: true bootstrap.memory_lock: true
opendistro_security.ssl.transport.pemcert_filepath: node1.pem opendistro_security.ssl.transport.pemcert_filepath: node1.pem
production_cluster/elastic_opendistro/wazuh-indexer-node2.yml
+1 -1
View File
@@ -2,7 +2,7 @@ network.host: elasticsearch-2
cluster.name: wazuh-cluster cluster.name: wazuh-cluster
node.name: elasticsearch-2 node.name: elasticsearch-2
discovery.seed_hosts: elasticsearch,elasticsearch-2,elasticsearch-3 discovery.seed_hosts: elasticsearch,elasticsearch-2,elasticsearch-3
cluster.initial_master_nodes: elasticsearch,elasticsearch-2,elasticsearch-3 cluster.initial_master_nodes: elasticsearch
bootstrap.memory_lock: true bootstrap.memory_lock: true
opendistro_security.ssl.transport.pemcert_filepath: node2.pem opendistro_security.ssl.transport.pemcert_filepath: node2.pem
production_cluster/elastic_opendistro/wazuh-indexer-node3.yml
+1 -1
View File
@@ -2,7 +2,7 @@ network.host: elasticsearch-3
cluster.name: wazuh-cluster cluster.name: wazuh-cluster
node.name: elasticsearch-3 node.name: elasticsearch-3
discovery.seed_hosts: elasticsearch,elasticsearch-2,elasticsearch-3 discovery.seed_hosts: elasticsearch,elasticsearch-2,elasticsearch-3
cluster.initial_master_nodes: elasticsearch,elasticsearch-2,elasticsearch-3 cluster.initial_master_nodes: elasticsearch
bootstrap.memory_lock: true bootstrap.memory_lock: true
opendistro_security.ssl.transport.pemcert_filepath: node3.pem opendistro_security.ssl.transport.pemcert_filepath: node3.pem
wazuh-indexer/config/entrypoint.sh
+10 -1
View File
@@ -5,10 +5,19 @@
# Start Wazuh indexer # Start Wazuh indexer
############################################################################## ##############################################################################
rm -rf /var/lib/wazuh-indexer/*
service wazuh-indexer start service wazuh-indexer start
sleep 20 sleep 20
export JAVA_HOME=/usr/share/wazuh-indexer/jdk/ && bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/ -nhnv -cacert /etc/wazuh-indexer/certs/root-ca.pem -cert /etc/wazuh-indexer/certs/admin.pem -key /etc/wazuh-indexer/certs/admin-key.pem -p 9800 -icl echo "inicio ver hostname"
echo $HOSTNAME
echo "fin ver hostname"
export OPENSEARCH_PATH_CONF=/etc/wazuh-indexer
export JAVA_HOME=/usr/share/wazuh-indexer/jdk
/usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig -icl -p 9800 -cd /usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig -nhnv -cacert /etc/wazuh-indexer/certs/root-ca.pem -cert /etc/wazuh-indexer/certs/admin.pem -key /etc/wazuh-indexer/certs/admin-key.pem
#export JAVA_HOME=/usr/share/wazuh-indexer/jdk/ && bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/ -nhnv -cacert /etc/wazuh-indexer/certs/root-ca.pem -cert /etc/wazuh-indexer/certs/admin.pem -key /etc/wazuh-indexer/certs/admin-key.pem -p 9800 -icl
tail -f /var/log/wazuh-indexer/wazuh-cluster.log tail -f /var/log/wazuh-indexer/wazuh-cluster.log