Cloud service FAQ
What is Wazuh Cloud?
Wazuh Cloud provides a comprehensive solution by hosting and managing all Wazuh components within a single integrated platform. Wazuh cloud allows you to create your environment and enroll Wazuh agents. By leveraging Wazuh, you gain access to security capabilities, including Security Information and Event Management (SIEM) and Extended Detection and Response (XDR).
Can I try it for free?
Yes, Wazuh provides a free trial to create a cloud environment and access the Wazuh Cloud service. You can sign up for a 14-day free trial, and no credit card information is required to complete this process.
Will I be charged when my trial is over?
No, Wazuh does not request credit card information to start your trial. Charges are only applied if you keep using the service beyond the trial period.
Is it PCI DDS compliant?
Yes, the Wazuh Cloud platform is validated as PCI DSS Level 1 Service Provider compliant.
Is it SOC 2 compliant?
Yes, the Wazuh Cloud platform is compliant with SOC 2 standards.
How can I get support?
Every environment includes support after the first payment. You can contact the Wazuh team anytime through the Help section on your Wazuh Cloud Console. You can also fill out this form to get help from the Wazuh team.
Where is Wazuh Cloud hosted?
Wazuh Cloud is hosted on Amazon Web Services (AWS).
What is a profile?
A profile refers to predefined settings available for configuring your Wazuh Cloud environment. We offer three profiles: Small, Medium, and Large. They provide ready-to-use environment templates that cater to different needs and requirements. If none of these predefined profiles meet your specific requirements, you can configure your settings individually.
What is a setting?
In the context of Wazuh Cloud, a setting refers to each configuration option available for a cloud environment. These settings determine the limitations and functionalities of an environment. For example, the "Active Agents" setting specifies the maximum number of active agents allowed in your environment. Note that the settings chosen for an environment directly impact its pricing, as they affect the resources allocated and functionalities available.
What is the indexed data?
The indexed data, previously known as hot storage, includes the data available on the Wazuh dashboard, which corresponds to the information Wazuh indexed. This information becomes searchable and analyzable as soon as Wazuh ingests and indexes the events sent by the agents.
What is the archive data?
The data generated by Wazuh is archived in an AWS S3 bucket for long-term storage purposes. Unlike the indexed data, this archive data is not searchable or analyzable. It simply consists of a collection of compressed files. For more information, please see the Archive data section.
What is a tier?
The concept of a tier, which represents the size limitation, in bytes, of the indexed data (formerly known as hot storage), is no longer used. It has been replaced by the indexed data capacity setting.
What happens if the tier limit is reached?
See What happens if the indexed data capacity setting is reached?.
What happens if the indexed data capacity setting is reached?
When the selected indexed data capacity is reached, the oldest events will be automatically removed from your index regardless of the index data time. This data is available in archive data for you to access. See the Archive data section to learn more about data logging and storage.
How is indexed data rotated?
Data rotation is determined by two conditions: the indexed data retention and the indexed data capacity. For instance, if you have set a 3-month indexed data retention and a 100GB indexed data capacity, and you consume the entire 100GB within the first month, the data will start rotating. Similarly, even if you have not utilized all 100GB, the data from the first month will be rotated by the fourth month if only 20GB is used.
What happens if the average/peak EPS is exceeded?
If the number of events per second (EPS) exceeds the allowed average/peak limit, events start queueing. Once the queue is full, new events are discarded. The queue and buffer settings are located in the internal options for analysisd. New releases might change the default values to maintain optimal performance and improve service.
Can I increase the average/peak EPS
Can I cancel at any time?
Yes, you can cancel at any time with no penalty. You can keep using your environment until the end of your current billing cycle, and no future charges are incurred after this period.