Upgrade the Wazuh manager to the latest available version. When upgrading a Wazuh multi-node cluster, it is recommended to update the master node first to reduce server downtime.
Root user privileges are required to execute all the commands described below.
To upgrade the Wazuh manager, choose your package manager and follow the instructions.
Add the Wazuh repository:
Stop the Wazuh manager:
Upgrade the Wazuh manager to the latest version:
Restart the Wazuh manager:
The configuration file of the Wazuh manager will not be replaced in the updates if it has been modified, so the settings of the new capabilities will have to be added manually. More information can be found at the User manual.
If Wazuh runs in a multi-node cluster, it is necessary to update all Wazuh managers to the same version. Otherwise, Wazuh nodes will not join the cluster.
Recommended action - Disable Wazuh updates
We recommend disabling the Wazuh repository to prevent accidental upgrades. To do so, use the following command:
The Wazuh manager is now successfully upgraded. To check if your version of Elastic Stack is compatible with the new Wazuh version, check our compatibility matrix.
To upgrade Elastic Stack, follow the instructions in the Upgrading Elasticsearch, Kibana and Filebeat section.
If you are going to keep the same version of Elastic Stack, unfold the next section and follow the instructions to replace the Wazuh Kibana plugin.
Remove the old Wazuh Kibana plugin:
# cd /usr/share/kibana/ # sudo -u kibana bin/kibana-plugin remove wazuh
Install the new Wazuh Kibana plugin. Replace the Kibana version if necessary:
# cd /usr/share/kibana/ # sudo -u kibana /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/4.x/ui/kibana/wazuh_kibana-4.2.4_7.10.2-1.zip
Clear the browser’s cache and cookies.