You install and configure the Wazuh server and Elastic Stack by following a step-by-step deployment process of each involved component. During the installation, the certificates needed for securing the communication are generated. Therefore, we recommend that you first install Open Distro for Elasticsearch to encrypt the communication.
For a distributed deployment, each of the following components is installed on their dedicated server. If needed, Kibana can optionally be installed on the same server as an Elasticsearch node.
Elasticsearch cluster:
Elasticsearch single-node cluster <elasticsearch_single_node_cluster>Elasticsearch multi-node cluster <elasticsearch_multi_node_cluster>
Wazuh cluster:
Wazuh single-node cluster <wazuh_single_node_cluster>Wazuh multi-node cluster <wazuh_multi_node_cluster>
Kibana:
Kibana installation <kibana>
elasticsearch-cluster/index wazuh-cluster/index kibana/index