Wazuh 4.14.1 RC1: Installation Assistant Test Results

Welcome, guys! This article details the testing of the Wazuh 4.14.1 Release Candidate 1 (RC1) installation assistant. Our primary focus is to ensure a smooth and error-free installation process across various operating systems and scenarios. This includes both online and offline installations using different options. Let's dive into the specifics!

Discussion Category: Wazuh

Additional Information:

Description

This release focuses on thoroughly testing the installation assistant with the -a option across a range of operating systems. We also evaluate the -dw and -of options for offline installations to ensure robustness in diverse environments.

Specifically, we are testing the installation assistant with the -a option on the following OSs:

• Amazon Linux 2023 aarch64.
• RHEL 9 x86_64.
• Ubuntu 22.04 amd64.
• Ubuntu 24.04 arm64.

Additionally, we are testing the installation assistant with the -dw and -of options (Offline installation) on:

• Amazon Linux 2023 x86_64
• Ubuntu 22.04 arm64

Checks

The following table summarizes the checks performed on each operating system. Each check evaluates a critical aspect of the installation process to guarantee the stability and functionality of the Wazuh deployment.

Understanding the Checks

Installed Packages: Ensuring the correct packages are installed is the first step. This involves verifying that all the packages specified in the documentation are present and accounted for. If the installation assistant installs additional packages, we need to understand why and ensure it doesn't conflict with existing configurations. Think of it like making sure you have all the ingredients before you start cooking; missing ingredients can ruin the dish!

Install Logs: The install logs are like a detailed diary of the installation process. We meticulously review these logs for any error messages or warnings. Spotting errors early on is crucial for a smooth deployment. These logs help us pinpoint exactly where things might have gone wrong, allowing us to quickly troubleshoot and resolve any issues. By analyzing the logs, we can identify potential bottlenecks or conflicts and address them before they escalate.

Wazuh Indexer Logs: The Wazuh indexer is a key component, and its logs are vital for understanding how data is being processed. Any errors here could indicate problems with data ingestion or indexing, which could impact the effectiveness of Wazuh's security monitoring capabilities. We scrutinize these logs to ensure that the indexer is functioning optimally and that no data is being lost or corrupted. This helps maintain the integrity and reliability of the Wazuh platform.

Wazuh Manager Logs: The Wazuh manager is the central brain of the system. Its logs provide insights into the overall health and performance of the Wazuh deployment. Errors in these logs can indicate issues with agent communication, rule processing, or other core functions. Therefore, we pay close attention to these logs to ensure that the manager is operating smoothly and efficiently. This ensures that all connected agents are properly managed and that security events are being accurately analyzed.

Wazuh Dashboard Logs: The dashboard is the window into your Wazuh world. These logs tell us if there are any problems rendering the user interface or retrieving data for visualizations. A healthy dashboard is essential for effective security monitoring. We check these logs to ensure the dashboard is functioning correctly and providing accurate and timely information. This allows users to quickly identify and respond to security threats.

Decoding the Status

Here's a quick guide to understanding the status indicators used in the checks table. Knowing these will help you quickly assess the progress and outcome of each test.

Status legend:

• :black_circle: - Pending/In progress
• :white_circle: - Skipped
• :red_circle: - Rejected
• :yellow_circle: - Known issue
• :green_circle: - Approved

Conclusion

In summary, some issues were identified during the testing process, and these have been duly reported for further investigation and resolution. The issues are being addressed to ensure the stability and reliability of the Wazuh 4.14.1 release.

Auditor's validation

Before we can proceed with the release or the next candidate version, the following auditors need to give their stamp of approval. This ensures that all aspects of the release have been thoroughly reviewed and meet the required standards.

• [ ] @wazuh/devel-qa-release
• [ ] @wazuh/devel-devops