Upgrade from the same major version (3.x)

The following steps show how to upgrade to the latest available version of Wazuh 3.x (which implies upgrading to the latest version of Elastic Stack 6.x).

Starting the upgrade

If you followed our manager or agents installation guides, probably you disabled the repository in order to avoid undesired upgrades. It's necessary to enable them again to get the last packages.

  1. CentOS/RHEL/Fedora:

# sed -i "s/^enabled=0/enabled=1/" /etc/yum.repos.d/wazuh.repo
  1. Debian/Ubuntu:

This step is not necessary if you set the packages to the hold state instead of disabling the repositories.

# sed -i "s/^#deb/deb/" /etc/apt/sources.list.d/wazuh.list
  1. OpenSUSE:

# sed -i "s/^enabled=0/enabled=1/" /etc/zypp/repos.d/wazuh.repo

Upgrade the Wazuh manager and API

  1. CentOS/RHEL/Fedora:

# yum upgrade wazuh-manager wazuh-api
  1. Debian/Ubuntu:

# apt-get update
# apt-get install wazuh-manager wazuh-api
  1. OpenSUSE:

# zypper update wazuh-manager wazuh-api

Note

The installation of the updated packages will automatically restart the services for the Wazuh manager, API and agents. Your Wazuh config file will keep unmodified, so you'll need to manually add the settings for the new capabilities. Check the User Manual for more information.

Upgrade the Wazuh agent

Since the Wazuh 3.x version it is possible to upgrade the agents from the manager or locally.

Upgrading the agents remotely from the manager is possible thanks to the agent_upgrade tools and the Wazuh API. You may check it in the Upgrading agent section.

To perform the upgrade locally you have to follow the next steps:

  1. CentOS/RHEL/Fedora:

# yum upgrade wazuh-agent
  1. Debian/Ubuntu:

# apt-get update
# apt-get install wazuh-agent
  1. OpenSUSE:

# zypper update wazuh-agent
  1. Windows:

The agent upgrading process for Windows systems requires to download the latest available installer from the packages list. There are two ways of using it (both of them require administrator rights):

  • Using the GUI installer:

Open the installer and follow the instructions to upgrade the agent.

../../_images/windows.png
  • Using the command line:

To upgrade the Windows agent from the command line, run the installer using Windows PowerShell or the command prompt (the /q argument is used for unattended installations):

# wazuh-agent-3.10.2-1.msi /q

Note

To learn more about the unattended installation process, you can check the Windows installation guide.

Finishing the Wazuh upgrade

You've finished upgrading your Wazuh installation to the latest version. Now you can disable again the Wazuh repositories in order to avoid undesired upgrades and compatibility issues.

  1. CentOS/RHEL/Fedora:

# sed -i "s/^enabled=1/enabled=0/" /etc/yum.repos.d/wazuh.repo
  1. Debian/Ubuntu:

This step is not necessary if you set the packages to the hold state instead of disabling the repositories.

# sed -i "s/^deb/#deb/" /etc/apt/sources.list.d/wazuh.list
# apt-get update
  1. OpenSUSE:

# sed -i "s/^enabled=1/enabled=0/" /etc/zypp/repos.d/wazuh.repo

Next steps

Once you have updated the Wazuh manager and API you are ready to upgrade the Elastic Stack.

You might also want to check our compatibility matrix in order to look at the Elastic stack version you need to use.