Container Updates

As containers are updated they will require some manual actions on the log aggregator/hydra to remain functional. As of the latest AMI build an update for the Wazuh container is required. Please follow the following guidelines to apply the latest container.

1. Log into your hydra

2. Escalate privileges by typing sudo -s and Pressing [ENTER]

3. Type vim /etc/siemonster/docker_images.env and Press [Enter]

4. Find the line that starts with DOCKER_WAZUH and move your cursor to the beginning of the line that starts with the text specified.

5. Press [INSERT] twice, it should display “--REPLACE--” at the bottom, and paste the following string DOCKER_WAZUH=siemonster/wazuh:prod-v4.6.1-hydra

6. Press [ESC] and then Type :wq and Press [ENTER]

7. Now Paste the following line and Press [ENTER]
   docker pull siemonster/wazuh:prod-v4.6.1-hydra

8. Wait for the process to complete.

9. Type systemctl restart wazuh and Press [ENTER]

Your container is now up to date.