As part of the new Data Persistence Model to be implemented across Wazuh, we want to develop a plugin for the Wazuh Indexer to ensure that all of its requirements are ready during its initialization. The initialization process would consist of these currently identified requirements (these may change):
Creating the stateless stream indices and their index templates (mappings and settings).
Creating the stateful indices and their index templates (mappings and settings).
Creating the agent index and its index template (mappings and settings).
All necessary users and their minimum permissions (RBAC).
Rollover + alias configuration for stream indices.
On this spike, we will design, build and test a PoC of this plugin.
The goal of this issue is to collect the knowledge base to scaffold a Wazuh Indexer plugin for development, interact with its life cycle, automatically test its features and explore these capabilities:
create indices and index templates (mappings)
communicate and interact with other plugins, for example, Index Management
Functional requirements
The plugin's uses OpenSearch's lifecycle to initialize the features mentioned above.
The plugin includes error handling to notify the users of errors in an understandable manner.
The Wazuh Indexer will not allow indexing until it's being initialized correctly.
Implementation restrictions
We will use Java as the programming language.
The initialization plugin will be included in the Wazuh Indexer packages by default.
Description
As part of the new Data Persistence Model to be implemented across Wazuh, we want to develop a plugin for the Wazuh Indexer to ensure that all of its requirements are ready during its initialization. The initialization process would consist of these currently identified requirements (these may change):
On this spike, we will design, build and test a PoC of this plugin.
The goal of this issue is to collect the knowledge base to scaffold a Wazuh Indexer plugin for development, interact with its life cycle, automatically test its features and explore these capabilities:
Functional requirements
Implementation restrictions
Plan